spanish language phish from OVH

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Aug 2024 12:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sj15x-00000000Lhk-1gwN

for dave@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 12:39:09 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Aug 2024 12:39:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-61bd4567.vps.ovh.net ([57.128.183.102]:43124)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sj0aS-00000000Hu1-4Au9

for doctor@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 12:06:41 -0600

Received: by vps-61bd4567.vps.ovh.net (Postfix, from userid 0)

id 625FE9058B; Tue, 27 Aug 2024 17:26:25 +0000 (UTC)

To: doctor@doctor.nl2k.ab.ca

Subject: IMPORTANTE - Aviso de Multas Judiciales: Pago Obligatorio para Evitar Penalidades - IVA - (622228)

X-Mailer: Microsoft Office Outlook, Build 17.551210

From: Envio de Buzon Fiscal

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="beca21a79d8cd356f8f8f0f144398bae"

Content-Transfer-Encoding: 7bit

Message-Id: <20240827174158.625FE9058B@vps-61bd4567.vps.ovh.net>

Date: Tue, 27 Aug 2024 17:26:25 +0000 (UTC)

X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Notificación de AFIP Estimado(a) Ciudadano/a,



Content analysis details: (9.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[57.128.183.102 listed in will-spam-for-food.eu.org]

[57.128.183.102 listed in will-spam-for-food.eu.org]

[57.128.183.102 listed in will-spam-for-food.eu.org]

[57.128.183.102 listed in will-spam-for-food.eu.org]

[57.128.183.102 listed in will-spam-for-food.eu.org]

[57.128.183.102 listed in will-spam-for-food.eu.org]

[57.128.183.102 listed in will-spam-for-food.eu.org]

[57.128.183.102 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[57.128.183.102 listed in dnsbl.ahbl.org]

[57.128.183.102 listed in dnsbl.ahbl.org]

[57.128.183.102 listed in dnsbl.ahbl.org]

[57.128.183.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[57.128.183.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[57.128.183.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[57.128.183.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[57.128.183.102 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[57.128.183.102 listed in wl.mailspike.net]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 URI_TRY_3LD URI: "Try it" URI, suspicious hostname

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable

1.0 URI_AZURE_CLOUDAPP Link to hosted azure web application, possible

phishing

0.6 TO_NO_BRKTS_HTML_ONLY To: misformatted and HTML only

Subject: {SPAM?} IMPORTANTE - Aviso de Multas Judiciales: Pago Obligatorio para Evitar Penalidades - IVA - (622228)



This is a MIME encoded message.



--beca21a79d8cd356f8f8f0f144398bae

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: 8bit





































Notificación de AFIP



























logo gobierno de méxico













Estimado(a) Ciudadano/a,



Me

dirijo a usted en calidad de Juan López, Asistente

Administrativo de la Dirección de Recursos Humanos de la

Secretaría de Hacienda y Crédito Público, para

informarle sobre la Resolución de Archivo Interlocutoria adjunta.





Ver Resolución de Archivo Interlocutoria: PDF-643077.pdf (21 KB)







Atentamente,





Juan López




Asistente Administrativo




Dirección de Recursos Humanos




Secretaría de Hacienda y Crédito Público













En caso de no cumplir con las obligaciones

dentro del plazo, se aplicarán intereses y recargos según

el Artículo 8172 del Código Fiscal.





Para asistencia, contacte a nuestro soporte al contribuyente en soporte@sre.gob.mx.





© 2024 Gobierno de México. Todos los derechos reservados.



























Correo automático. No responder.

































Casino phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Aug 2024 12:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sj16K-00000000Lji-3yrw

for dave@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 12:39:32 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Aug 2024 12:39:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 172-236-123-96.ip.linodeusercontent.com ([172.236.123.96]:39441 helo=musor8m3.ru)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sj0r5-00000000Juc-2DC5

for root@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 12:23:52 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=musor8m3.ru;

h=Date:Sender:Message-Id:From:Subject:Content-Type:Mime-Version:Content-Transfer-Encoding; i=contact@musor8m3.ru;

bh=GOSNW9yoZyoEzzc8FfqPmdcOkeg=;

b=MPA2t3m1En8YM3nmk3IpgVMCWpv6EQMDPDrDUDmkTJaVdjri75mezHrIvGZfGhcw9d3kdihLRhw/

Nk6TuJfDVzM47qgJ/TpHC3gn0H9/RC1g1S797yxL8Dqx1QVXeZQr99ITlHa2rAjWPQOqenwYFkef

28RUApIYOyiv69xwqWM=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=musor8m3.ru;

b=EWJ66YrFJqBF2Sp54xmuoet6a8J07O1S9NT6kp2LY4Y05EB2o9uicp9dgZhjgveaiBzi5fa0ZI8a

nLsvX/TonY7Zc9rd5yy1PsjA6f8BM6N0YBe6AoJI7zRUjJqh1lKeTWUkX5PnQ5ZM3ZsvP744A/cM

fuZjBYT59TpUK9ArImI=;

Date: Tue, 27 Aug 2024 18:21:50 +0000

Sender: contact@musor8m3.ru

Message-Id: <852486461155539.9.ECY7694112959@musor8m3.ru>

From: " 💲 Reward Offer 💲 "@doctor.nl2k.ab.ca

Subject: Claim Your $15,000 Welcome Bonus Now

Content-Type: text/html; charset="UTF-8"

Mime-Version: 1.0

Content-Transfer-Encoding: 8bit

X-Spam_score: 21.2

X-Spam_score_int: 212

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: HTML Template FLEXIBLE



Content analysis details: (21.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.236.123.96 listed in will-spam-for-food.eu.org]

[172.236.123.96 listed in will-spam-for-food.eu.org]

[172.236.123.96 listed in will-spam-for-food.eu.org]

[172.236.123.96 listed in will-spam-for-food.eu.org]

[172.236.123.96 listed in will-spam-for-food.eu.org]

[172.236.123.96 listed in will-spam-for-food.eu.org]

[172.236.123.96 listed in will-spam-for-food.eu.org]

[172.236.123.96 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.236.123.96 listed in dnsbl.ahbl.org]

[172.236.123.96 listed in dnsbl.ahbl.org]

[172.236.123.96 listed in dnsbl.ahbl.org]

[172.236.123.96 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.236.123.96 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.236.123.96 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.236.123.96 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.236.123.96 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: sensiloedper.com]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

1.0 FROMSPACE Idiosyncratic "From" header format

0.0 TVD_RCVD_IP Message was received from an IP address

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 LOTS_OF_MONEY Huge... sums of money

0.3 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

4.0 DYNAMIC_IMGUR dynamic IP + hosted image

0.0 FROM_ADDR_WS Malformed From address

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Claim Your $15,000 Welcome Bonus Now












name="viewport"

content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"

/>



HTML Template






style="

display: none;

max-height: 0px;

max-width: 0px;

opacity: 0;

overflow: hidden;

"

>



align="center"

bgcolor="#c2c2c2"

width="100%"

style="

border-collapse: collapse;

border-spacing: 0;

font-family: Arial, Helvetica, sans-serif;

margin: 0 auto;

width: 100%;

"

>










id="main-wrapper"

align="center"

border="0"

cellpadding="0"

cellspacing="0"

width="100%"

style="

border-collapse: collapse;

border-spacing: 0;

font-family: Arial, Helvetica, sans-serif;

font-size: 14px;

margin: 0 auto;

max-width: 600px;

min-width: 270px;

background-color: #f4f4f4;

"

>








style="

border-collapse: collapse;

border-spacing: 0;

font-family: Arial, Helvetica, sans-serif;

font-size: 14px;

margin: 0 auto;

max-width: 600px;

min-width: 270px;

background: url(https://sensiloedper.com/bizgstorage/i24slots-banner.png); background-repeat: no-repeat;

width: 100%;

"

>










style="

border-collapse: collapse;

border-spacing: 0;

font-family: Arial, Helvetica, sans-serif;

font-size: 14px;

margin: 0 auto;

max-width: 600px;

min-width: 270px;

width: 100%;

"

>


















src="https://sensiloedper.com/bizgstorage/i24slots-logo-orange.png"

alt="brand-logo"

width="250"

style="text-align: center;"

/>















 





 



FLEXIBLE
WELCOME PACKAGE









$15,000







 





+ 500 FREE SPINS














href="https://azdiibrabbwiseneness.uk/4Pbulo793rojM57xnlkdfvmvb142OFYIBFVKMIHNIKO351DTNX2488u10"

style="

box-sizing: border-box;

display: inline-block;

border-radius: 20px;

background: #D66127;

font-size: 20px;

font-weight: bold;

text-decoration: none;

font-family: system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif;

color: #ffffff;

width: 240px;

padding: 21px 0;

"

>JOIN NOW
>











 


















































align="left"

border="0"

cellpadding="0"

cellspacing="0"

width="100%"

style="

border-collapse: collapse;

border-spacing: 0;

margin: 0 auto;

width: 100%;

max-width: 600px;

min-width: 270px;

"

>




align="left"

border="0"

cellpadding="0"

cellspacing="0"

width="100%"

style="

border-collapse: collapse;

border-spacing: 0;

margin: 0 auto;

background-color: #000;

width: 100%;

min-width: 270px;

"

>


















align="left"

border="0"

cellpadding="0"

cellspacing="0"

width="100%"

style="

text-align: left;

border-collapse: collapse;

border-spacing: 0;

margin: 0 auto;

width: 100%;

"

>














style="

font-size: 16px;

color: #ffffff;

text-align: center;

line-height: 18x;

letter-spacing: 0px;

min-width: 270px;

padding-bottom: 10px;

padding-top: 20px;

"

>

Enjoy i24Slot's Flexible Welcome Bonus Package of up to 400%. With a whopping $15,000 in bonuses and 500 free spins to jumpstart your gambling adventure!






style="

font-size: 16px;

color: #ffffff;

text-align: center;

line-height: 18px;

letter-spacing: 0px;

min-width: 270px;

padding-bottom: 10px;



"

>



• Make a minimum deposit of just $30 to start reaping the rewards.


• Go all in with a total deposit of $4000 to maximize your bonus potential and claim the full amount.




















align="left"

border="0"

cellpadding="0"

cellspacing="0"

width="100%"

style="

border-collapse: collapse;

border-spacing: 0;

margin: 0 auto;

background-color: #f4f4f4;

width: 100%;

min-width: 270px;

"

>


















align="left"

border="0"

cellpadding="0"

cellspacing="0"

width="100%"

style="

text-align: left;

border-collapse: collapse;

border-spacing: 0;

margin: 0 auto;

width: 100%;

"

>





More Reasons to Play?




























style="

font-size: 16px;

color: #000000;

text-align: center;

line-height: 18px;

letter-spacing: 0px;

min-width: 270px;

padding-bottom: 15px;

"

>

Live like royalty with i24Slots's exclusive VIP Rewards! For a limited time only, VIPs are eligible for a bonus on every deposit made based on your VIP status.








































align="center"

border="0"

cellpadding="0"

cellspacing="0"

width="100%"

style="

background-color: #f4f4f4;

text-align: center;

border-collapse: collapse;

border-spacing: 0;

margin: 0 auto;

width: 100%;

min-width: 270px;

"


















href="https://azdiibrabbwiseneness.uk/4Pbulo793rojM57xnlkdfvmvb142OFYIBFVKMIHNIKO351DTNX2488u10"

style="

box-sizing: border-box;

display: inline-block;

border-radius: 20px;

background: #cbc86e;

font-size: 20px;

font-weight: bold;

text-decoration: none;

font-family: system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif;

color: #000;

width: 240px;

padding: 21px 0;

"

>JOIN NOW
>






















align="left"

border="0"

cellpadding="0"

cellspacing="0"

width="100%"

style="

background-color: #f4f4f4;

text-align: left;

border-collapse: collapse;

border-spacing: 0;

margin: 0 auto;

width: 100%;

min-width: 270px;

"

>








style="

min-width: 270px;

color: #737a82;

font-size: 16px;

font-style: italic;

line-height: 24px;

"

>






















align="center"

border="0"

cellpadding="0"

cellspacing="0"

width="100%"

style="

background-color: #ffffff;

border-collapse: collapse;

border-spacing: 0;

margin: 0 auto;

width: 100%;

max-width: 600px;

min-width: 270px;

"

>










align="left"

border="0"

cellpadding="0"

cellspacing="0"

width="100%"

style="

background-color: #ffffff;

text-align: left;

border-collapse: collapse;

border-spacing: 0;

margin: 0 auto;

width: 100%;

min-width: 270px;

"

>






















style="width: 300px; max-width: 300px"

width="300"

src=""

alt=""

/>
























width="1" height="1" border="0">





Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Aug 2024 11:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sj0Mk-000000005im-0Rff

for dave@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 11:52:26 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Aug 2024 11:52:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01olkn2077.outbound.protection.outlook.com ([40.92.107.77]:6307 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sj0Fj-000000004s8-49c1

for sales@nk.ca;

Tue, 27 Aug 2024 11:45:16 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=SkdZ6NXm53qSgyoKKhlxNKAqQ2pthn8TgFw5c4QLP8DAkY7bxDFlpCrnFVVZ2oXTg2442EZfsBOLBj6YEVTQP1c+/gl2nIebbmqCoMnybDZ7XRWN30EIlp2vTVc3FlabmDSGBsg00/gw21LvudTOM1PD85McUuBCG5KMmmYTDCX9LlsJke9IkzwgWF76nd9LYBVtd4g/jbl2wjbibNZAdlA+/7l1NI9Q4V1B2wjh3SDvUhulOd4x3IvW9T0v7PLPeRUZH+qcoZm6xh/yr9gik4CIQMtOLFrY0ICvnkwFnD9iYF/hiFGtWsN1l7gBsxX+ZfriOwdGXxFKswrlTe87wg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=3OMMAQZA08Wtfk+BjuZ/SK6XNMnL0ZpnT+v8+mgE7IU=;

b=aGcY/DlW/paEoPSlmdVXl8HRdUI0tX1akuk+KAlIg2RSZKCOtJZW46YoJqi4FH/PtGle7wXFN/MUHPVXaGia6rADdA1h6POlPz7gyAuOdEZo1Hn6MPCN+ZCqtKNOuAfQeWtF2wdPDYpMCf5G45k5ljJTN/CVd+5XK7L21nQ+owG2ryXhnpKal1BLBek1eh3d99oJ2vQKVU0sBjcUF9VBm5fMGY/aoV7H4ts9D/Yfv6gakEWxXhIjsBIA8Onn1++/yvKcRskvFcCba6s96mGP5dKvwmPXRvtJ0kirJ2J7hMMxvyMBXdWcA/iS9YBbweHlts4eEeBgwHPb0cUtiTGT5w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=3OMMAQZA08Wtfk+BjuZ/SK6XNMnL0ZpnT+v8+mgE7IU=;

b=qbeUQgaUeNg0UOIVxZ/gPPbr13kTzBqatgYzHmwRu8fIhEDhUgRc6vdOQEUrWbcJrlN8MZmnE0o7fyoYwKnuEqTKlJl7Z0mo97GvtpL3g9gPnmu6aCsNUc+C+tbkkhi88l6ZyQb13/Y2DFGvhV44ekNNpdT+3xKL2+jFF1dystR5xJ2OPjOY5rwdZzJlhm/76KDg9Ygm53QgelJ8X59xKuMq5SuohURRa0rPf0UBoIA+aQxrdehfyj5AD6JxCMlus0q8D7er9PgdeepP8yaECdNeg+uFIo+AQmyg6rS277msEvZjl/+TYkdlBwNwbI7PlJ28+geAa75Nak6VeLAvfg==

Received: from KL1PR01MB6482.apcprd01.prod.exchangelabs.com

(2603:1096:820:13d::13) by JH0PR01MB5466.apcprd01.prod.exchangelabs.com

(2603:1096:990:10::13) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7897.25; Tue, 27 Aug

2024 17:42:53 +0000

Received: from KL1PR01MB6482.apcprd01.prod.exchangelabs.com

([fe80::8493:4c24:f2a7:e8a7]) by KL1PR01MB6482.apcprd01.prod.exchangelabs.com

([fe80::8493:4c24:f2a7:e8a7%4]) with mapi id 15.20.7897.021; Tue, 27 Aug 2024

17:42:53 +0000

From: Imran Khan

To: "n@hainsolutions.com"

Subject: Quote @#

Thread-Topic: Quote @#

Thread-Index: AQHa+KhmhtltFXlaQ02j5AYG0U7ODg==

Date: Tue, 27 Aug 2024 17:42:53 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [z4wjIbk6tWx0ZxTgNHmaUnochHSdbGm1WHynaCwrB6o8XqvOJ1zzj6Pd15Jq53VK]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KL1PR01MB6482:EE_|JH0PR01MB5466:EE_

x-ms-office365-filtering-correlation-id: 0b4c9c46-cfd0-43cf-8e4e-08dcc6bfad89

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799006|461199028|19110799003|15030799003|8060799006|440099028|3412199025|102099032;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?/cAXFDJro7Jye0YZHtqmbg4MrYcHH3g9O2EUxJM4aciPfHAgm/eKAS0wix?=

=?iso-8859-1?Q?dSGvtskuyDF5TmAf+kk0WDmBoYhBGjO7/YE9ClKOllIw6IpfNOoMBmp+fm?=

=?iso-8859-1?Q?mUizSauS/LBXObtQa0j/RSPafYn3Ra/oqFh4Tm9Z8G+mtV6tYjIan5UxxL?=

=?iso-8859-1?Q?WlpiK9Cw1Gs/wFEJ9w2fuUqpQhk7MY0bJlwG+DybXNq/uUp0QyUcZTG6p7?=

=?iso-8859-1?Q?QYWJbvewQ8BaxQbbdFiZGChY8sV3jNK2/wwHXHjkpX7S4izj8A9aWcGKpA?=

=?iso-8859-1?Q?aQhdjAmqYRB78oWJ8TFbD7filA4CG2JSv3hjORxQh+RAqlDFgWffX/nMoh?=

=?iso-8859-1?Q?CXjpM9lxOdFgV6q7bJSVMPuE5PMVE9MrpH3hIto4V2wg316pvQM1xreZ4P?=

=?iso-8859-1?Q?P6emsroHXfP2W5DT0ALon/wL5yGherstGh5t2eT8ouChI7RdYzCQgfJF8s?=

=?iso-8859-1?Q?jOTwbq01wJ79FcuBSc8ywjA9+M7k5ySCr34lb1jK+PM6bRED+O4f5KXIiX?=

=?iso-8859-1?Q?liBF5CWi6suWSWVwaxZ7v4phPpcNFaE5j1aN3ZlwNxP5f/6r5f6g3iCPmM?=

=?iso-8859-1?Q?O5OfSPgGS62rkA9A+vkpuH+7IW+mqSgEcufhryc4GLIKPUTlgO8NhzgEgq?=

=?iso-8859-1?Q?WzN9dFLRaIHosuPo+P/Be9VOuEO4H7tJhzpeM2FXrC5YvRfA8vTKBSf7s/?=

=?iso-8859-1?Q?JyFv/T8v+8jgK3BJgMcy2ioooV8CavbV5giAabqBAUs8YIVIc5eRapSf1r?=

=?iso-8859-1?Q?bq1iW8IdIwjCoTwPlOqqaKdu5eLxQZCN5hUN20z1BSFDr9/rLAQo2ejaGL?=

=?iso-8859-1?Q?ZtQIVlbJnzcGBz2vXlqNTltWyEHCOtNiv1KK56mWsRWB2qRM6bXqE6tsVS?=

=?iso-8859-1?Q?STe+UmcdzTPEluYDcFkpuHNMu3ndIKZEJRhmX0KCJnZWjniuRTDAaterB4?=

=?iso-8859-1?Q?4QND+ORrnoskMHmg+iNudQ3Yl8As0PCZ48FaR6NVD/fzJhCG8yQ4TPK010?=

=?iso-8859-1?Q?tSF5BpZcOq6zML44nUBPK3nRNh4cOrXyBCUp/VwhhDMPnHkVlPpaPKI/y2?=

=?iso-8859-1?Q?leaOV0IZ0nnRwKqhDcjWoxyTXgRDnbrhBmjLsVoWBs8aKhmgBnjHFqvBpb?=

=?iso-8859-1?Q?1VauIw35wM29ebsNotXWiqd0kgO0JwqT8zeFAdZ4BghGIM8YHlDBQHRsYS?=

=?iso-8859-1?Q?BdV41PBgFlSF6fxqIW5TMAvmv5jgIDArN9ZhKAGXSP6pBW7H5ntZDXca+y?=

=?iso-8859-1?Q?N6rxRmiyfUv93IblapNQ2ZuHkUXbc/dUxbrbA3+0jprhrU2DL5H6YZ7DwR?=

=?iso-8859-1?Q?TJLDGkQJPrFbvkNk3FfnAyyyYeZ0UYwnsCu6igtJMdcm4toqkhqvnCbA+K?=

=?iso-8859-1?Q?h61ytMdQph?=

Content-Type: multipart/alternative;

boundary="_000_KL1PR01MB648258E096C7E034C208CC16CC942KL1PR01MB6482apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KL1PR01MB6482.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 0b4c9c46-cfd0-43cf-8e4e-08dcc6bfad89

X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Aug 2024 17:42:53.1889

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: JH0PR01MB5466



--_000_KL1PR01MB648258E096C7E034C208CC16CC942KL1PR01MB6482apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



I am still waiting for your reply. Please let me know if you are interested=

in my services below?



Thank you,



Note:- May I send a quote .? if interested



Sent: , Aug 20 , 2024

Subject: Cost@#



Hi there,



After reviewing your website, we found a few mistakes.



Give us the go-ahead if you would like to receive screenshots for more info=

rmation.



Warm regards,



--_000_KL1PR01MB648258E096C7E034C208CC16CC942KL1PR01MB6482apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








margin: 0px; font-family: Calibri, Helvetica, sans-serif; font-size: 10pt; =

color: rgb(0, 0, 0);">

Hi,



Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">

I am still waiting for your reply. Please let me know if you are interested=

in my services below?



Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">

Thank you,



Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">

Note:-  May I send a quote .? if interested



Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">

Sent: , Aug 20 , 2024


Subject: Cost@#



Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">

Hi there,



Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">

After reviewing your website, we found a few mistakes.



margin: 0px; font-family: Calibri, Helvetica, sans-serif; font-size: 10pt; =

color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">

Give us the go-ahead if you would like to receive screenshots for mo=

re information.



Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">







margin: 0px; font-family: Calibri, Helvetica, sans-serif; font-size: 10pt; =

color: rgb(0, 0, 0);">

Warm regards,








--_000_KL1PR01MB648258E096C7E034C208CC16CC942KL1PR01MB6482apcp_--

Casino phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Aug 2024 11:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sj0MK-000000005gt-32jF

for dave@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 11:52:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Aug 2024 11:52:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [139.162.2.73] (port=48165 helo=jurist-ee-pr.ru)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sizfb-000000001a6-1RnD

for root@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 11:07:58 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=jurist-ee-pr.ru;

h=Date:Sender:Message-Id:From:Subject:Content-Type:Mime-Version:Content-Transfer-Encoding; i=contact@jurist-ee-pr.ru;

bh=vWxe/ngsDqgnTSR5nqlnVdcXQ3s=;

b=wjbM65ivza8yDzx+wVzDWJFqM2FXpnoFxK3Ru246L2PNVC8Pj6zUtrd9qCY5W3RFHKxC92pAyT8q

TaVniZ1NF40me3LW3Ldpa8r28IbkaAMkINvQTMGTpelSiHYix46YcrKVY9fS+xWrWE5gFi//8Aej

DH1kuAzCYc2PIRE7b2E=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=jurist-ee-pr.ru;

b=ujb4j+sgjV+OlrVeBdteDz1dWY6nlethCfqYljt8QkVULdBLluyv5O5uGCp9vGkl/FxVOr2L1i1O

ep/FMGHCO4Nc33tfzXcofPq1hsUMBZU57DaKWNy+tBAEYvovBa2wqpWCZ7112YUoYVncKczFntho

9Vmbzk+7Et7D+bawWks=;

Date: Tue, 27 Aug 2024 17:05:56 +0000

Sender: contact@jurist-ee-pr.ru

Message-Id: <818847833823773.5.NSO9888920186@jurist-ee-pr.ru>

From: "casino Canada"@doctor.nl2k.ab.ca

Subject: Claim bonus

Content-Type: text/html; charset="UTF-8"

Mime-Version: 1.0

Content-Transfer-Encoding: 8bit

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: GET 50-FREE-SPINS Free-for-New-Casino-Players No-Deposit-Required.

root@doctor.nl2k.ab.ca, 08-27-2024 Play-for-Free-and-Win-for-Real! Register-now-with-your-Email.

Set Your Email Here START SPINNING



Content analysis details: (14.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[139.162.2.73 listed in dnsbl.ahbl.org]

[139.162.2.73 listed in dnsbl.ahbl.org]

[139.162.2.73 listed in dnsbl.ahbl.org]

[139.162.2.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[139.162.2.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[139.162.2.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[139.162.2.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[139.162.2.73 listed in dnsbl.ahbl.org]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 TVD_SPACE_RATIO No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

0.0 FROM_ADDR_WS Malformed From address

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Claim bonus





GET 50-FREE-SPINS
Free-for-New-Casino-Players
No-Deposit-Required.



root@doctor.nl2k.ab.ca, 08-27-2024

Play-for-Free-and-Win-for-Real!
Register-now-with-your-Email.


Set Your Email Here
START SPINNING















width="1" height="1" border="0">



Web / SEO / App spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Aug 2024 11:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sj0MT-000000005hk-3xPB

for dave@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 11:52:09 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Aug 2024 11:52:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f195.google.com ([209.85.128.195]:38051)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1siznw-000000002KB-1Wnb

for sales@nk.ca;

Tue, 27 Aug 2024 11:16:33 -0600

Received: by mail-yw1-f195.google.com with SMTP id 00721157ae682-6b434d597ceso5078797b3.0

for ; Tue, 27 Aug 2024 10:14:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webtechmine.com; s=google; t=1724778867; x=1725383667; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=VYhKIlyNzpWJYeWXsX9pasmjmayDvuNpmcsVITSCcWc=;

b=f0RsCXtm4CoCuUzQilv6LUL/uacmLL0IJI5Sxri6CCQcSvtK9Gy/QSF9vlacWMPsW9

UH7BlFeqdvncZDu9snZcc/8cYp3Fxg4keBKQvk/i1KpLBTW4lJ4TkRGIXzVNEbvHyHK5

4SiNfRXaFK+oVuQU8rEWAEExsb+p+83BBmT57FXy6rpszGZWVHBPB+UcwBLnQ0DxiprN

0DCLecCOwnSfXyva1OrVCSk3zwoP5h5BsXdaBknT4c2WX/ef3Jt/GBFa7gauJ/nN0a3+

GKAZ2tz06UsZEfP/Q30iDTI69TCpy65ZI0I/eGgOwKAkA7H1jIC9Y7s4qfM9xp5sykZl

lyHA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1724778867; x=1725383667;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=VYhKIlyNzpWJYeWXsX9pasmjmayDvuNpmcsVITSCcWc=;

b=AUj/9a55daBoJFqzyc6h9NX2goM2ASbzyn/BxHzOcYVZ01xmUzLwzcE+ahGrTc4QwW

3xnjO3933pAv8qqjNjJ0JzGKirawjTXAMnCzj/Q3/FnCABD3POKuNI+qiKfAGjnAQmk8

qo+Psm+dpErNZM7hPGONz+IVSlXIjsnRW3LM+h+VzsE9WrmjwFShPjhFm9lAmR+jZkuY

7QCUhJxIh449kpNCuj2B4e/04PNuiCdRxUMp+14kRN+C4EVX6rDwJXvDIm5JbV36pCZu

KtRVIb4aknV5MAYU0zBxdulKQFFC1FnOUtbFUdkFfNlBJmi6NxyYKskcIX3xleR2PyXj

bhrg==

X-Gm-Message-State: AOJu0YxCyxDMpcvvk0Zveat6ysZR/GPMyirED8++ReFZEMIM6gp+m9me

E5ZNzA2TUBc+GijXJfKt9kWRVE0u2wy5rmVPVZhtv6A3t7W9Ul5l5ShwMeunepfh4quoTKxcLH9

9y1+MHcZnYEJT8r8PbReMXtn+6fKOfpYeAfZ1TCwlB7DOuGa/ApYD

X-Google-Smtp-Source: AGHT+IFX4RCUPjkp6AF5grUvohLZ4V/8D6KY+ad4VpoT2v8hOOP8d/DPAzxbUqLxcWSFPpAA9tIAMvsPREKcKdUB1kw=

X-Received: by 2002:a05:6902:220f:b0:e0b:64fc:c5b3 with SMTP id

3f1490d57ef6-e17a86a74eamr8280747276.9.1724778867214; Tue, 27 Aug 2024

10:14:27 -0700 (PDT)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Tue, 27 Aug 2024 13:14:26 -0400

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Tue, 27 Aug 2024 10:14:25 -0700

MIME-Version: 1.0

Sender: Annabelle Stevens

From: Annabelle Stevens

Date: Tue, 27 Aug 2024 13:14:26 -0400

X-Google-Sender-Auth: 0NJyyXLjE7BTLll4TRn3Q1Ukv8Q

Message-ID:

Subject: nk.ca: From Ordinary to Extraordinary: Redesign Your Website with Us!

To: Sales

Content-Type: multipart/alternative; boundary="000000000000b264150620ad5f0c"

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hii *nk.ca *Team, Looking to refresh the website

*nk.ca *with a top-tier design? We offer comprehensive design

and redesign services that ensure your site stands out and performs at its

best, all while k [...]



Content analysis details: (12.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.195 listed in will-spam-for-food.eu.org]

[209.85.128.195 listed in will-spam-for-food.eu.org]

[209.85.128.195 listed in will-spam-for-food.eu.org]

[209.85.128.195 listed in will-spam-for-food.eu.org]

[209.85.128.195 listed in will-spam-for-food.eu.org]

[209.85.128.195 listed in will-spam-for-food.eu.org]

[209.85.128.195 listed in will-spam-for-food.eu.org]

[209.85.128.195 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.195 listed in dnsbl.ahbl.org]

[209.85.128.195 listed in dnsbl.ahbl.org]

[209.85.128.195 listed in dnsbl.ahbl.org]

[209.85.128.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.195 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.195 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.195 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.195 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.128.195 listed in bl.score.senderscore.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: webtechmine.com]

2.4 NOT_SPAM BODY: I'm not spam! Really! I'm not, I'm not, I'm not!

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} nk.ca: From Ordinary to Extraordinary: Redesign Your Website with Us!



--000000000000b264150620ad5f0c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hii *nk.ca *Team,



Looking to refresh the website *nk.ca with a top-tier

design? We offer comprehensive design and redesign services that ensure

your site stands out and performs at its best, all while keeping costs

reasonable.



Want to see what we can do? I can send over our portfolio and pricing

information. Let=E2=80=99s schedule a Zoom call to discuss your project and

demonstrate our approach.



I'm looking forward to hearing back from you



.*

Regards,



Annabelle Stevens | Marketing Manager

------------------------------------------------------------

We are not spammers and are against spamming of any kind. If forwarding

this email has offended you or your company, then we apologize for the

same. To discontinue receiving such emails from us, if you would reply with

"Unsubscribe".

[image: beacon]



--000000000000b264150620ad5f0c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hii=C2=A0
http://nk.ca">nk.ca=C2=A0Team,=C2=A0

na, sans-serif">
Looking to refresh the website=C2=A0
//nk.ca">nk.ca=C2=A0with a top-tier design? We offer comprehensive =

design and redesign services that ensure your site stands out and performs =

at its best, all while keeping costs reasonable.

Want to see what we=

can do? I can send over our portfolio and pricing information. Let=E2=80=

=99s schedule a Zoom call to discuss your project and demonstrate=C2=A0our=

=C2=A0approach.


ont>
I'm looking forward to=

hearing back from you.


ce=3D"verdana, sans-serif">Regards,

sans-serif">Annabelle Stevens | Marketing Manager
--------------=

----------------------------------------------

=3D"border-left:none;padding:0px;display:flex;font-size:medium">

=3D"margin:0px;min-width:0px;padding:0px 0px 20px;width:initial">

"m_-5346076869296685683m_-2822855519899674058m_812172324771784472m_-5332323=

448279597470m_3127093821557420843m_8729485872115602158m_9055028477008234866=

m_6923422672282487180m_-7007731447435880274m_8532861689769300808gmail-:mk" =

style=3D"direction:ltr;margin:8px 0px 0px;padding:0px;font-size:0.875rem;ov=

erflow-x:hidden">

12172324771784472m_-5332323448279597470m_3127093821557420843m_8729485872115=

602158m_9055028477008234866m_6923422672282487180m_-7007731447435880274m_853=

2861689769300808gmail-:mj" style=3D"direction:initial;font-variant-numeric:=

normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-k=

erning:auto;font-feature-settings:normal;font-stretch:normal;font-size:smal=

l;line-height:1.5;overflow:auto hidden">

"verdana, sans-serif">We are not spammers and are against =

spamming of any kind. If forwarding this email has offended you or your com=

pany, then we apologize for the same. To discontinue receiving such emails =

from us, if you would reply with "Unsubscribe".
v>



KG2RMYqHw01UI7ARO4uZW6XvDjsRl5NSUkQH_3V8bl32HlA50X0FDKBmWD-xip_kvqqJy6VuqZr=

a6ZxQ-eruFuNwd9xAzyHO5MrA9SqyXNeOduSShbLq7ndCbdlcygjkN71lT4yA-dUsjTdtELDOq"=

width=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; display:non=

e!important;">



--000000000000b264150620ad5f0c--

Casino phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Aug 2024 11:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sj0MK-000000005gt-32jF

for dave@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 11:52:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Aug 2024 11:52:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [139.162.2.73] (port=48165 helo=jurist-ee-pr.ru)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sizfb-000000001a6-1RnD

for root@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 11:07:58 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=jurist-ee-pr.ru;

h=Date:Sender:Message-Id:From:Subject:Content-Type:Mime-Version:Content-Transfer-Encoding; i=contact@jurist-ee-pr.ru;

bh=vWxe/ngsDqgnTSR5nqlnVdcXQ3s=;

b=wjbM65ivza8yDzx+wVzDWJFqM2FXpnoFxK3Ru246L2PNVC8Pj6zUtrd9qCY5W3RFHKxC92pAyT8q

TaVniZ1NF40me3LW3Ldpa8r28IbkaAMkINvQTMGTpelSiHYix46YcrKVY9fS+xWrWE5gFi//8Aej

DH1kuAzCYc2PIRE7b2E=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=jurist-ee-pr.ru;

b=ujb4j+sgjV+OlrVeBdteDz1dWY6nlethCfqYljt8QkVULdBLluyv5O5uGCp9vGkl/FxVOr2L1i1O

ep/FMGHCO4Nc33tfzXcofPq1hsUMBZU57DaKWNy+tBAEYvovBa2wqpWCZ7112YUoYVncKczFntho

9Vmbzk+7Et7D+bawWks=;

Date: Tue, 27 Aug 2024 17:05:56 +0000

Sender: contact@jurist-ee-pr.ru

Message-Id: <818847833823773.5.NSO9888920186@jurist-ee-pr.ru>

From: "casino Canada"@doctor.nl2k.ab.ca

Subject: Claim bonus

Content-Type: text/html; charset="UTF-8"

Mime-Version: 1.0

Content-Transfer-Encoding: 8bit

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: GET 50-FREE-SPINS Free-for-New-Casino-Players No-Deposit-Required.

root@doctor.nl2k.ab.ca, 08-27-2024 Play-for-Free-and-Win-for-Real! Register-now-with-your-Email.

Set Your Email Here START SPINNING



Content analysis details: (14.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

[139.162.2.73 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[139.162.2.73 listed in dnsbl.ahbl.org]

[139.162.2.73 listed in dnsbl.ahbl.org]

[139.162.2.73 listed in dnsbl.ahbl.org]

[139.162.2.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[139.162.2.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[139.162.2.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[139.162.2.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[139.162.2.73 listed in dnsbl.ahbl.org]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 TVD_SPACE_RATIO No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

0.0 FROM_ADDR_WS Malformed From address

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Claim bonus





GET 50-FREE-SPINS
Free-for-New-Casino-Players
No-Deposit-Required.



root@doctor.nl2k.ab.ca, 08-27-2024

Play-for-Free-and-Win-for-Real!
Register-now-with-your-Email.


Set Your Email Here
START SPINNING















width="1" height="1" border="0">



Nigerian Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Aug 2024 09:44:00 -0600

Received: from mail-ot1-f48.google.com ([209.85.210.48]:54518)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1siyMH-00000000M4v-2jpJ

for dave@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 09:43:54 -0600

Received: by mail-ot1-f48.google.com with SMTP id 46e09a7af769-7095bfd6346so5057519a34.0

for ; Tue, 27 Aug 2024 08:42:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1724773315; x=1725378115; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=8j1//LiohdJml98yp25fJT1LO2dRbPfbrLMH4Q7Z8TE=;

b=TUeugiXKh7pAQcOy757LkGEQAAsQWfJJrgJ4YIlovG/KPgM8tgVqMOrpd2F/fc4jkP

R1cfjop2VHRJt0nwS0d3FjaKkKu3Yg0q1irZQbh5p/pZ7in3Ei3UYFOWopqbyskFH9by

BrKh2LT4eDwqxAwPB2zlVMy4XExlqrHirQOYZWiF0c5dSHdHcgAQe2/b6q5lzkUaIedB

yu3kBjORU05vclxq6QBOXcUmLg01vehJwAsJ1Zdyro8txw7DGOLnuvc+oEEg/cRgY9zm

Li0de6z0S6APDSEJDal9gpSoaT2F978Odog+yIrGk8Wmq2/cr9wYrjT1VKAyz0n8xSu5

TjxQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1724773315; x=1725378115;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=8j1//LiohdJml98yp25fJT1LO2dRbPfbrLMH4Q7Z8TE=;

b=V8yocu6v8z0Q83CaeuRIJYT0M8e3ptpWKu7O+suPB7x/Nru5xZusgsHc6Uj8JCDvQ0

JnpqBD2UHIPU/utuMxkwsJxbR2UqC6UWeQ63cG7qorfZe7eZ9CzPY9va/GKiauJ2Tg2i

OkhQ6S/QfXafMvooB84eqlGu6bicnEOoatskJcdWOu1enwcTwOz1pjsAF4JFy8obz3Ia

SnXUiVmbDjy+zgruJD+2GpCXQ6TWof5ujbJuleMf50c2/f2jVFCgAUVDBI3MnZXLK/XR

8Br8MfkpIkjvvIGbmVB1LDn3F7sbMEY5HZxguHb2d2EUCUbkyfsKA0UxNQp2+EVvVSa2

TKRg==

X-Forwarded-Encrypted: i=1; AJvYcCVCAjFacSdpA/AFTT1Z7UdcCktuv8XxmC3qRl4sM0FoH5+8OhNF8jwIh0FZcfZV6QcXjxDE@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyWXpl0X7EP6pDRySGyxdrTLvJUaGEX6I7m7zobjqUaE2cHvC0P

LmjDrYcJKFv8wH3Zk5PTmJ8gtabVRw/aqenXpC3hpOCtcu/zw1W5H+2ZBWUc/Xx6xTOPjMn5wyI

6iMcoLm2OkKKd1kxAZzT2L6seUCw=

X-Google-Smtp-Source: AGHT+IEctxR8bF0tY8JlvPoUlx0Y0NeOa9dz58RruUp2k/I1isCQOWPmeZZfRAZqpdkS95tPYvnfRY/LbdypxkENwgo=

X-Received: by 2002:a05:6358:7185:b0:1b5:a0fd:bee8 with SMTP id

e5c5f4694b2df-1b5c3a3b692mr1085712255d.6.1724773314123; Tue, 27 Aug 2024

08:41:54 -0700 (PDT)

MIME-Version: 1.0

Reply-To: farouqsadiya40@gmail.com

From: Sadiya Farouq

Date: Tue, 27 Aug 2024 16:41:43 +0100

Message-ID:

Subject: Good day my dear friend

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b4e3280620ac14f8"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 15.7

X-Spam_score_int: 157

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day to you and your families. I am Mrs. Sadiya Farouq,

the wife of the deceased former Head of Delegation to the World Bank in West

Africa. My husband (Omar Farouq) was the linkman between the Or [...]



Content analysis details: (15.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.48 listed in will-spam-for-food.eu.org]

[209.85.210.48 listed in will-spam-for-food.eu.org]

[209.85.210.48 listed in will-spam-for-food.eu.org]

[209.85.210.48 listed in will-spam-for-food.eu.org]

[209.85.210.48 listed in will-spam-for-food.eu.org]

[209.85.210.48 listed in will-spam-for-food.eu.org]

[209.85.210.48 listed in will-spam-for-food.eu.org]

[209.85.210.48 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.48 listed in dnsbl.ahbl.org]

[209.85.210.48 listed in dnsbl.ahbl.org]

[209.85.210.48 listed in dnsbl.ahbl.org]

[209.85.210.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.48 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.48 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.48 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.48 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.48 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[jw103651(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jw103651(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[farouqsadiya40(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

2.3 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Good day my dear friend



--000000000000b4e3280620ac14f8

Content-Type: text/plain; charset="UTF-8"



Good day to you and your families. I am Mrs. Sadiya Farouq, the wife of the

deceased former Head of Delegation to the World Bank in West Africa. My

husband (Omar Farouq) was the linkman between the Organization for

Petroleum Exporting Countries - OPEC and the petroleum sector in a West

African country. He also attended OPEC meetings constantly in Geneva before

his death caused by cardiac arrest in our home town.

Through the sale of our allocated oil quota in OPEC he was able to make

S$15.5 million which he deposited with one of the banks in our country as a

business associate partner fund and not in my name or name of anybody. I

need your help in claiming this money as I cannot claim it directly because

he made the deposit as a fund belonging to his business associate in order

for our country government not to raise an eyebrow on it since he was a

civil servant during that time, and the code of conduct bureau forbids him

or his wife to acquire such amount of money.



It is on this basis that I am contacting you for assistance which I know

that you are very capable to help me claim the fund, if you will be

interested all the necessary claim documents that would cover the fund into

your account shall be procured in your name as a beneficiary of the fund

and no authorities will question you the origin of the fund. I promise you

that you shall be entitled to 40% of the total funds while the rest will be

given to me upon arrival in your country for the up keeping of my only son

and for further investment under your care and control there in your

country as I cannot be able to do any investment here in West Africa due to

the origin of the said fund.



I will not fail to bring to your notice that this business is risk free and

does not have any negative implications. You should not entertain any fear

at all now or in the future as all modalities for the smooth and easy

transfer of this fund have been finalized. If you can conveniently assure

me of your ability to keep this business very secret and confidential and

then promise me that you will not betray me when the fund enters into your

account in your country then Kindly contact me for more details.



Thank you in advance for taking time out of your busy day to read and

consider my proposal. My message may come to you as a surprise but don't

worry it is for good because it is my honest desire to share the

transaction relationship with you for which I am contacting you today. Get

back to me if you are truly interested.



Finally I want you to know that I cannot speak very well being a Stammering.



Best regards,

Mrs. Sadiya Farouq.



--000000000000b4e3280620ac14f8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Good day to you and your families. I am Mrs. Sadiya Farouq=

, the wife of the deceased former Head of Delegation to the World Bank in W=

est Africa. My husband (Omar Farouq) was the linkman between the Organizati=

on for Petroleum Exporting Countries - OPEC and the petroleum sector in a W=

est African country. He also attended OPEC meetings constantly in Geneva be=

fore his death caused by cardiac arrest in our home town.
Through the sa=

le of our allocated oil quota in OPEC he was able to make S$15.5 million wh=

ich he deposited with one of the banks in our country as a business associa=

te partner fund and not in my name or name of anybody. I need your help in =

claiming this money as I cannot claim it directly because he made the depos=

it as a fund belonging to his business associate in order for our country g=

overnment not to raise an eyebrow on it since he was a civil servant during=

that time, and the code of conduct bureau forbids him or his wife to acqui=

re such amount of money.

It is on this basis that I am contacting yo=

u for assistance which I know that you are very capable to help me claim th=

e fund, if you will be interested all the necessary claim documents that wo=

uld cover the fund into your account shall be procured in your name as a be=

neficiary of the fund and no authorities will question you the origin of th=

e fund. I promise you that you shall be entitled to 40% of the total funds =

while the rest will be given to me upon arrival in your country for the up =

keeping of my only son and for further investment under your care and contr=

ol there in your country as I cannot be able to do any investment here in W=

est Africa due to the origin of the said fund.

I will not fail to br=

ing to your notice that this business is risk free and does not have any ne=

gative implications. You should not entertain any fear at all now or in the=

future as all modalities for the smooth and easy transfer of this fund hav=

e been finalized. If you can conveniently assure me of your ability to keep=

this business very secret and confidential and then promise me that you wi=

ll not betray me when the fund enters into your account in your country the=

n Kindly contact me for more details.

Thank you in advance for takin=

g time out of your busy day to read and consider my proposal. My message ma=

y come to you as a surprise but don't worry it is for good because it i=

s my honest desire to share the transaction relationship with you for which=

I am contacting you today. Get back to me if you are truly interested.
=


Finally I want you to know that I cannot speak very well being a Stamme=

ring.

Best regards,
Mrs. Sadiya Farouq.




--000000000000b4e3280620ac14f8--

Instagram followers phish from Microsoft outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Aug 2024 07:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1siwQA-00000000IGF-0o4t

for dave@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 07:39:42 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Aug 2024 07:39:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp.cluodme.com ([104.214.224.93]:59111 helo=smtp.dropsmail.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1siwDK-00000000H1y-1oFY

for sales@nk.ca;

Tue, 27 Aug 2024 07:26:31 -0600

dkim-signature: v=1; a=rsa-sha256; d=cluodme.com; s=dkim1;

c=relaxed/relaxed; q=dns/txt; h=From:Subject:Date:Message-ID:To:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=m/tVSCPEq/0OPAo9qn+kZcrWd7km/STMBNF4swGNtGE=;

b=D9iAol3r2SQgk9lHh40BcOI2FfpKAx3zeVS91xKQf5SxM98upf9TI4iDFNHiZYwqa7j1D9uFq94D0PScD6LTNIbt+BhDjl7CGQaX1GyZyXdFC0kK+Uihe+IXKBECd3qMi+JvZ2zHDM/Nw15unDKqIIXMychQx5f7kz093QNhyWAXL0FNIMXihH9gEQ3OIzhUBdsK66S9bWx1y1NrH7VYPdD+XuzsAHNzopIZ+MfHhZKPLeb/3d79cyOfao

dhCfSq5AkqiLiba/rzZAv+DBLPG1RkXXFS8NrUgui2TfTzijIBJ/PcmtCigzeHfTr8o4tLn7IoLn5oYvFGpfKOUWyzqg==

Received: from SQLMAIL (Unknown [104.45.10.112])

by smtp.dropsmail.com with ESMTPSA

(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256)

; Tue, 27 Aug 2024 15:24:22 +0200

Message-ID:

MIME-Version: 1.0

From: "Vip-Followers"

To: sales@nk.ca

Date: 27 Aug 2024 15:24:22 +0200

Subject: =?utf-8?B?SW5zdGFncmFtIFZJUCBTZXJ2aWNlIOKcqA==?=

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64

X-Spam_score: 8.7

X-Spam_score_int: 87

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Increase your instagram followers Increase your instagram

followers Exclusive Growth Instagram Service



Content analysis details: (8.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[104.214.224.93 listed in dnsbl.ahbl.org]

[104.214.224.93 listed in dnsbl.ahbl.org]

[104.214.224.93 listed in dnsbl.ahbl.org]

[104.214.224.93 listed in dnsbl.ahbl.org]

[104.45.10.112 listed in dnsbl.ahbl.org]

[104.45.10.112 listed in dnsbl.ahbl.org]

[104.45.10.112 listed in dnsbl.ahbl.org]

[104.45.10.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[104.214.224.93 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[104.214.224.93 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[104.214.224.93 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[104.214.224.93 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[104.214.224.93 listed in wl.mailspike.net]

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?utf-8?B?SW5zdGFncmFtIFZJUCBTZXJ2aWNlIOKcqA==?=



DQo8IURPQ1RZUEUgaHRtbD4NCjxodG1sIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8x

OTk5L3hodG1sIiB4bWxuczp2PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOnZtbCIg

eG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIj4N

CjxoZWFkPg0KICAgIDwhLS1baWYgZ3RlIG1zbyAxNV0+DQogICAgPHhtbD4NCiAgICA8

bzpPZmZpY2VEb2N1bWVudFNldHRpbmdzPg0KICAgIDxvOkFsbG93UE5HLz4NCiAgICA8

bzpQaXhlbHNQZXJJbmNoPjk2PC9vOlBpeGVsc1BlckluY2g+DQogICAgPC9vOk9mZmlj

ZURvY3VtZW50U2V0dGluZ3M+DQogICAgPC94bWw+DQogICAgPCFbZW5kaWZdLS0+DQog

ICAgPG1ldGEgY2hhcnNldD0iVVRGLTgiIC8+DQogICAgPG1ldGEgaHR0cC1lcXVpdj0i

WC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1lZGdlIiAvPg0KICAgIDxtZXRhIG5h

bWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwt

c2NhbGU9MSIgLz4NCiAgICA8dGl0bGU+SW5jcmVhc2UgeW91ciBpbnN0YWdyYW0gZm9s

bG93ZXJzPC90aXRsZT4NCiAgICA8bGluayByZWw9InN0eWxlc2hlZXQiIGhyZWY9Imh0

dHBzOi8vZm9udHMuZ29vZ2xlYXBpcy5jb20vY3NzP2ZhbWlseT1QbGF5ZmFpcitEaXNw

bGF5OjQwMCw0MDBpLDcwMCw3MDBpLDkwMCw5MDBpIiAvPg0KICAgIDxzdHlsZT4NCiAg

ICAgICAgaW1nIHsNCiAgICAgICAgICAgIC1tcy1pbnRlcnBvbGF0aW9uLW1vZGU6IGJp

Y3ViaWM7DQogICAgICAgIH0NCg0KICAgICAgICB0YWJsZSwgdGQgew0KICAgICAgICAg

ICAgbXNvLXRhYmxlLWxzcGFjZTogMHB0Ow0KICAgICAgICAgICAgbXNvLXRhYmxlLXJz

cGFjZTogMHB0Ow0KICAgICAgICB9DQoNCiAgICAgICAgLm1jZVN0YW5kYXJkQnV0dG9u

LCAubWNlU3RhbmRhcmRCdXR0b24gdGQsIC5tY2VTdGFuZGFyZEJ1dHRvbiB0ZCBhIHsN

CiAgICAgICAgICAgIG1zby1oaWRlOiBhbGwgIWltcG9ydGFudDsNCiAgICAgICAgfQ0K

DQogICAgICAgIHAsIGEsIGxpLCB0ZCwgYmxvY2txdW90ZSB7DQogICAgICAgICAgICBt

c28tbGluZS1oZWlnaHQtcnVsZTogZXhhY3RseTsNCiAgICAgICAgfQ0KDQogICAgICAg

IHAsIGEsIGxpLCB0ZCwgYm9keSwgdGFibGUsIGJsb2NrcXVvdGUgew0KICAgICAgICAg

ICAgLW1zLXRleHQtc2l6ZS1hZGp1c3Q6IDEwMCU7DQogICAgICAgICAgICAtd2Via2l0

LXRleHQtc2l6ZS1hZGp1c3Q6IDEwMCU7DQogICAgICAgIH0NCg0KICAgICAgICBAbWVk

aWEgb25seSBzY3JlZW4gYW5kIChtYXgtd2lkdGg6IDQ4MHB4KSB7DQogICAgICAgICAg

ICBib2R5LCB0YWJsZSwgdGQsIHAsIGEsIGxpLCBibG9ja3F1b3RlIHsNCiAgICAgICAg

ICAgICAgICAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IG5vbmUgIWltcG9ydGFudDsN

CiAgICAgICAgICAgIH0NCiAgICAgICAgfQ0KDQogICAgICAgIC5tY25QcmV2aWV3VGV4

dCB7DQogICAgICAgICAgICBkaXNwbGF5OiBub25lICFpbXBvcnRhbnQ7DQogICAgICAg

IH0NCg0KICAgICAgICAuYm9keUNlbGwgew0KICAgICAgICAgICAgbWFyZ2luOiAwIGF1

dG87DQogICAgICAgICAgICBwYWRkaW5nOiAwOw0KICAgICAgICAgICAgd2lkdGg6IDEw

MCU7DQogICAgICAgIH0NCg0KICAgICAgICAuRXh0ZXJuYWxDbGFzcywgLkV4dGVybmFs

Q2xhc3MgcCwgLkV4dGVybmFsQ2xhc3MgdGQsIC5FeHRlcm5hbENsYXNzIGRpdiwgLkV4

dGVybmFsQ2xhc3Mgc3BhbiwgLkV4dGVybmFsQ2xhc3MgZm9udCB7DQogICAgICAgICAg

ICBsaW5lLWhlaWdodDogMTAwJTsNCiAgICAgICAgfQ0KDQogICAgICAgIC5SZWFkTXNn

Qm9keSB7DQogICAgICAgICAgICB3aWR0aDogMTAwJTsNCiAgICAgICAgfQ0KDQogICAg

ICAgIC5FeHRlcm5hbENsYXNzIHsNCiAgICAgICAgICAgIHdpZHRoOiAxMDAlOw0KICAg

ICAgICB9DQoNCiAgICAgICAgYVt4LWFwcGxlLWRhdGEtZGV0ZWN0b3JzXSB7DQogICAg

ICAgICAgICBjb2xvcjogaW5oZXJpdCAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgdGV4

dC1kZWNvcmF0aW9uOiBub25lICFpbXBvcnRhbnQ7DQogICAgICAgICAgICBmb250LXNp

emU6IGluaGVyaXQgIWltcG9ydGFudDsNCiAgICAgICAgICAgIGZvbnQtZmFtaWx5OiBp

bmhlcml0ICFpbXBvcnRhbnQ7DQogICAgICAgICAgICBmb250LXdlaWdodDogaW5oZXJp

dCAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgbGluZS1oZWlnaHQ6IGluaGVyaXQgIWlt

cG9ydGFudDsNCiAgICAgICAgfQ0KDQogICAgICAgIGJvZHkgew0KICAgICAgICAgICAg

aGVpZ2h0OiAxMDAlOw0KICAgICAgICAgICAgbWFyZ2luOiAwOw0KICAgICAgICAgICAg

cGFkZGluZzogMDsNCiAgICAgICAgICAgIHdpZHRoOiAxMDAlOw0KICAgICAgICAgICAg

YmFja2dyb3VuZDogI2ZmZmZmZjsNCiAgICAgICAgfQ0KDQogICAgICAgIHAgew0KICAg

ICAgICAgICAgbWFyZ2luOiAwOw0KICAgICAgICAgICAgcGFkZGluZzogMDsNCiAgICAg

ICAgfQ0KDQogICAgICAgIHRhYmxlIHsNCiAgICAgICAgICAgIGJvcmRlci1jb2xsYXBz

ZTogY29sbGFwc2U7DQogICAgICAgIH0NCg0KICAgICAgICB0ZCwgcCwgYSB7DQogICAg

ICAgICAgICB3b3JkLWJyZWFrOiBicmVhay13b3JkOw0KICAgICAgICB9DQoNCiAgICAg

ICAgaDEsIGgyLCBoMywgaDQsIGg1LCBoNiB7DQogICAgICAgICAgICBkaXNwbGF5OiBi

bG9jazsNCiAgICAgICAgICAgIG1hcmdpbjogMDsNCiAgICAgICAgICAgIHBhZGRpbmc6

IDA7DQogICAgICAgIH0NCg0KICAgICAgICBpbWcsIGEgaW1nIHsNCiAgICAgICAgICAg

IGJvcmRlcjogMDsNCiAgICAgICAgICAgIGhlaWdodDogYXV0bzsNCiAgICAgICAgICAg

IG91dGxpbmU6IG5vbmU7DQogICAgICAgICAgICB0ZXh0LWRlY29yYXRpb246IG5vbmU7

DQogICAgICAgIH0NCg0KICAgICAgICBhW2hyZWZePSJ0ZWwiXSwgYVtocmVmXj0ic21z

Il0gew0KICAgICAgICAgICAgY29sb3I6IGluaGVyaXQ7DQogICAgICAgICAgICBjdXJz

b3I6IGRlZmF1bHQ7DQogICAgICAgICAgICB0ZXh0LWRlY29yYXRpb246IG5vbmU7DQog

ICAgICAgIH0NCg0KICAgICAgICBsaSBwIHsNCiAgICAgICAgICAgIG1hcmdpbjogMCAh

aW1wb3J0YW50Ow0KICAgICAgICB9DQoNCiAgICAgICAgLlByb3NlTWlycm9yIGEgew0K

ICAgICAgICAgICAgcG9pbnRlci1ldmVudHM6IG5vbmU7DQogICAgICAgIH0NCg0KICAg

ICAgICBAbWVkaWEgb25seSBzY3JlZW4gYW5kIChtYXgtd2lkdGg6IDQ4MHB4KSB7DQog

ICAgICAgICAgICBib2R5IHsNCiAgICAgICAgICAgICAgICB3aWR0aDogMTAwJSAhaW1w

b3J0YW50Ow0KICAgICAgICAgICAgICAgIG1pbi13aWR0aDogMTAwJSAhaW1wb3J0YW50

Ow0KICAgICAgICAgICAgfQ0KDQogICAgICAgICAgICAgICAgYm9keS5tb2JpbGUtbmF0

aXZlIHsNCiAgICAgICAgICAgICAgICAgICAgLXdlYmtpdC11c2VyLXNlbGVjdDogbm9u

ZTsNCiAgICAgICAgICAgICAgICAgICAgdXNlci1zZWxlY3Q6IG5vbmU7DQogICAgICAg

ICAgICAgICAgICAgIHRyYW5zaXRpb246IHRyYW5zZm9ybSAwLjJzIGVhc2UtaW47DQog

ICAgICAgICAgICAgICAgICAgIHRyYW5zZm9ybS1vcmlnaW46IHRvcCBjZW50ZXI7DQog

ICAgICAgICAgICAgICAgfQ0KDQogICAgICAgICAgICAgICAgICAgIGJvZHkubW9iaWxl

LW5hdGl2ZS5zZWxlY3Rpb24tYWxsb3dlZCBhLCBib2R5Lm1vYmlsZS1uYXRpdmUuc2Vs

ZWN0aW9uLWFsbG93ZWQgLlByb3NlTWlycm9yIHsNCiAgICAgICAgICAgICAgICAgICAg

ICAgIHVzZXItc2VsZWN0OiBhdXRvOw0KICAgICAgICAgICAgICAgICAgICAgICAgLXdl

YmtpdC11c2VyLXNlbGVjdDogYXV0bzsNCiAgICAgICAgICAgICAgICAgICAgfQ0KDQog

ICAgICAgICAgICBjb2xncm91cCB7DQogICAgICAgICAgICAgICAgZGlzcGxheTogbm9u

ZTsNCiAgICAgICAgICAgIH0NCg0KICAgICAgICAgICAgaW1nIHsNCiAgICAgICAgICAg

ICAgICBoZWlnaHQ6IGF1dG8gIWltcG9ydGFudDsNCiAgICAgICAgICAgIH0NCg0KICAg

ICAgICAgICAgLm1jZVdpZHRoQ29udGFpbmVyIHsNCiAgICAgICAgICAgICAgICBtYXgt

d2lkdGg6IDY2MHB4ICFpbXBvcnRhbnQ7DQogICAgICAgICAgICB9DQoNCiAgICAgICAg

ICAgIC5tY2VDb2x1bW4gew0KICAgICAgICAgICAgICAgIGRpc3BsYXk6IGJsb2NrICFp

bXBvcnRhbnQ7DQogICAgICAgICAgICAgICAgd2lkdGg6IDEwMCUgIWltcG9ydGFudDsN

CiAgICAgICAgICAgIH0NCg0KICAgICAgICAgICAgLm1jZUNvbHVtbi1mb3JjZVNwYW4g

ew0KICAgICAgICAgICAgICAgIGRpc3BsYXk6IHRhYmxlLWNlbGwgIWltcG9ydGFudDsN

CiAgICAgICAgICAgICAgICB3aWR0aDogYXV0byAhaW1wb3J0YW50Ow0KICAgICAgICAg

ICAgfQ0KDQogICAgICAgICAgICAubWNlQmxvY2tDb250YWluZXIgew0KICAgICAgICAg

ICAgICAgIHBhZGRpbmctcmlnaHQ6IDE2cHggIWltcG9ydGFudDsNCiAgICAgICAgICAg

ICAgICBwYWRkaW5nLWxlZnQ6IDE2cHggIWltcG9ydGFudDsNCiAgICAgICAgICAgIH0N

Cg0KICAgICAgICAgICAgLm1jZUJsb2NrQ29udGFpbmVyRTJFIHsNCiAgICAgICAgICAg

ICAgICBwYWRkaW5nLXJpZ2h0OiAwcHg7DQogICAgICAgICAgICAgICAgcGFkZGluZy1s

ZWZ0OiAwcHg7DQogICAgICAgICAgICB9DQoNCiAgICAgICAgICAgIC5tY2VTcGFjaW5n

LTI0IHsNCiAgICAgICAgICAgICAgICBwYWRkaW5nLXJpZ2h0OiAxNnB4ICFpbXBvcnRh

bnQ7DQogICAgICAgICAgICAgICAgcGFkZGluZy1sZWZ0OiAxNnB4ICFpbXBvcnRhbnQ7

DQogICAgICAgICAgICB9DQoNCiAgICAgICAgICAgIC5tY2VGb290ZXJTZWN0aW9uIC5t

Y2VUZXh0LCAubWNlRm9vdGVyU2VjdGlvbiAubWNlVGV4dCBwIHsNCiAgICAgICAgICAg

ICAgICBmb250LXNpemU6IDE2cHggIWltcG9ydGFudDsNCiAgICAgICAgICAgICAgICBs

aW5lLWhlaWdodDogMTQwJSAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgfQ0KDQogICAg

ICAgICAgICAubWNlVGV4dCwgLm1jZVRleHQgcCB7DQogICAgICAgICAgICAgICAgZm9u

dC1zaXplOiAxNnB4ICFpbXBvcnRhbnQ7DQogICAgICAgICAgICAgICAgbGluZS1oZWln

aHQ6IDE0MCUgIWltcG9ydGFudDsNCiAgICAgICAgICAgIH0NCg0KICAgICAgICAgICAg

aDEgew0KICAgICAgICAgICAgICAgIGZvbnQtc2l6ZTogMzBweCAhaW1wb3J0YW50Ow0K

ICAgICAgICAgICAgICAgIGxpbmUtaGVpZ2h0OiAxMjAlICFpbXBvcnRhbnQ7DQogICAg

ICAgICAgICB9DQoNCiAgICAgICAgICAgIGgyIHsNCiAgICAgICAgICAgICAgICBmb250

LXNpemU6IDI2cHggIWltcG9ydGFudDsNCiAgICAgICAgICAgICAgICBsaW5lLWhlaWdo

dDogMTIwJSAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgfQ0KDQogICAgICAgICAgICBo

MyB7DQogICAgICAgICAgICAgICAgZm9udC1zaXplOiAyMHB4ICFpbXBvcnRhbnQ7DQog

ICAgICAgICAgICAgICAgbGluZS1oZWlnaHQ6IDEyNSUgIWltcG9ydGFudDsNCiAgICAg

ICAgICAgIH0NCg0KICAgICAgICAgICAgaDQgew0KICAgICAgICAgICAgICAgIGZvbnQt

c2l6ZTogMThweCAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgICAgIGxpbmUtaGVpZ2h0

OiAxMjUlICFpbXBvcnRhbnQ7DQogICAgICAgICAgICB9DQogICAgICAgIH0NCg0KICAg

ICAgICBAbWVkaWEgb25seSBzY3JlZW4gYW5kIChtYXgtd2lkdGg6IDY0MHB4KSB7DQog

ICAgICAgICAgICAubWNlQ2x1c3RlckxheW91dCB0ZCB7DQogICAgICAgICAgICAgICAg

cGFkZGluZzogNHB4ICFpbXBvcnRhbnQ7DQogICAgICAgICAgICB9DQogICAgICAgIH0N

Cg0KICAgICAgICBkaXZbY29udGVudGVkaXRhYmxlPSJ0cnVlIl0gew0KICAgICAgICAg

ICAgb3V0bGluZTogMDsNCiAgICAgICAgfQ0KDQogICAgICAgIC5Qcm9zZU1pcnJvciAu

ZW1wdHktbm9kZSwgLlByb3NlTWlycm9yOmVtcHR5IHsNCiAgICAgICAgICAgIHBvc2l0

aW9uOiByZWxhdGl2ZTsNCiAgICAgICAgfQ0KDQogICAgICAgICAgICAuUHJvc2VNaXJy

b3IgLmVtcHR5LW5vZGU6OmJlZm9yZSwgLlByb3NlTWlycm9yOmVtcHR5OjpiZWZvcmUg

ew0KICAgICAgICAgICAgICAgIHBvc2l0aW9uOiBhYnNvbHV0ZTsNCiAgICAgICAgICAg

ICAgICBsZWZ0OiAwOw0KICAgICAgICAgICAgICAgIHJpZ2h0OiAwOw0KICAgICAgICAg

ICAgICAgIGNvbG9yOiByZ2JhKDAsMCwwLDAuMik7DQogICAgICAgICAgICAgICAgY3Vy

c29yOiB0ZXh0Ow0KICAgICAgICAgICAgfQ0KDQogICAgICAgICAgICAuUHJvc2VNaXJy

b3IgLmVtcHR5LW5vZGU6aG92ZXI6OmJlZm9yZSwgLlByb3NlTWlycm9yOmVtcHR5Omhv

dmVyOjpiZWZvcmUgew0KICAgICAgICAgICAgICAgIGNvbG9yOiByZ2JhKDAsMCwwLDAu

Myk7DQogICAgICAgICAgICB9DQoNCiAgICAgICAgLlByb3NlTWlycm9yIGgxLmVtcHR5

LW5vZGU6b25seS1jaGlsZDo6YmVmb3JlLA0KICAgICAgICAuUHJvc2VNaXJyb3IgaDIu

ZW1wdHktbm9kZTpvbmx5LWNoaWxkOjpiZWZvcmUsDQogICAgICAgIC5Qcm9zZU1pcnJv

ciBoMy5lbXB0eS1ub2RlOm9ubHktY2hpbGQ6OmJlZm9yZSwNCiAgICAgICAgLlByb3Nl

TWlycm9yIGg0LmVtcHR5LW5vZGU6b25seS1jaGlsZDo6YmVmb3JlIHsNCiAgICAgICAg

ICAgIGNvbnRlbnQ6ICdIZWFkaW5nJzsNCiAgICAgICAgfQ0KDQogICAgICAgIC5Qcm9z

ZU1pcnJvciBwLmVtcHR5LW5vZGU6b25seS1jaGlsZDo6YmVmb3JlLCAuUHJvc2VNaXJy

b3I6ZW1wdHk6OmJlZm9yZSB7DQogICAgICAgICAgICBjb250ZW50OiAnU3RhcnQgdHlw

aW5nLi4uJzsNCiAgICAgICAgfQ0KDQogICAgICAgIGEgLlByb3NlTWlycm9yIHAuZW1w

dHktbm9kZTo6YmVmb3JlLCBhIC5Qcm9zZU1pcnJvcjplbXB0eTo6YmVmb3JlIHsNCiAg

ICAgICAgICAgIGNvbnRlbnQ6ICcnOw0KICAgICAgICB9DQoNCiAgICAgICAgLm1jZVRl

eHQsIC5Qcm9zZU1pcnJvciB7DQogICAgICAgICAgICB3aGl0ZS1zcGFjZTogcHJlLXdy

YXA7DQogICAgICAgIH0NCg0KICAgICAgICBib2R5LCAjYm9keVRhYmxlIHsNCiAgICAg

ICAgICAgIGJhY2tncm91bmQtY29sb3I6IHJnYigyMzQsIDIzNiwgMjI2KTsNCiAgICAg

ICAgfQ0KDQogICAgICAgIC5tY2VUZXh0LCAubWNlTGFiZWwgew0KICAgICAgICAgICAg

Zm9udC1mYW1pbHk6IEFyaWFsLCAiSGVsdmV0aWNhIE5ldWUiLCBIZWx2ZXRpY2EsIHNh

bnMtc2VyaWY7DQogICAgICAgIH0NCg0KICAgICAgICAubWNlVGV4dCwgLm1jZUxhYmVs

IHsNCiAgICAgICAgICAgIGNvbG9yOiByZ2IoMCwgMCwgMCk7DQogICAgICAgIH0NCg0K

ICAgICAgICAgICAgLm1jZVRleHQgaDEgew0KICAgICAgICAgICAgICAgIG1hcmdpbi1i

b3R0b206IDBweDsNCiAgICAgICAgICAgIH0NCg0KICAgICAgICAgICAgLm1jZVRleHQg

cCB7DQogICAgICAgICAgICAgICAgbWFyZ2luLWJvdHRvbTogMHB4Ow0KICAgICAgICAg

ICAgfQ0KDQogICAgICAgICAgICAubWNlVGV4dCBsYWJlbCB7DQogICAgICAgICAgICAg

ICAgbWFyZ2luLWJvdHRvbTogMHB4Ow0KICAgICAgICAgICAgfQ0KDQogICAgICAgICAg

ICAubWNlVGV4dCBpbnB1dCB7DQogICAgICAgICAgICAgICAgbWFyZ2luLWJvdHRvbTog

MHB4Ow0KICAgICAgICAgICAgfQ0KDQogICAgICAgIC5tY2VTcGFjaW5nLTEyIC5tY2VJ

bnB1dCArIC5tY2VFcnJvck1lc3NhZ2Ugew0KICAgICAgICAgICAgbWFyZ2luLXRvcDog

LTZweDsNCiAgICAgICAgfQ0KDQogICAgICAgIC5tY2VUZXh0IGgxIHsNCiAgICAgICAg

ICAgIG1hcmdpbi1ib3R0b206IDBweDsNCiAgICAgICAgfQ0KDQogICAgICAgIC5tY2VU

ZXh0IHAgew0KICAgICAgICAgICAgbWFyZ2luLWJvdHRvbTogMHB4Ow0KICAgICAgICB9

DQoNCiAgICAgICAgLm1jZVRleHQgbGFiZWwgew0KICAgICAgICAgICAgbWFyZ2luLWJv

dHRvbTogMHB4Ow0KICAgICAgICB9DQoNCiAgICAgICAgLm1jZVRleHQgaW5wdXQgew0K

ICAgICAgICAgICAgbWFyZ2luLWJvdHRvbTogMHB4Ow0KICAgICAgICB9DQoNCiAgICAg

ICAgLm1jZVNwYWNpbmctMjQgLm1jZUlucHV0ICsgLm1jZUVycm9yTWVzc2FnZSB7DQog

ICAgICAgICAgICBtYXJnaW4tdG9wOiAtMTJweDsNCiAgICAgICAgfQ0KDQogICAgICAg

IC5tY2VJbnB1dCB7DQogICAgICAgICAgICBiYWNrZ3JvdW5kLWNvbG9yOiB0cmFuc3Bh

cmVudDsNCiAgICAgICAgICAgIGJvcmRlcjogMnB4IHNvbGlkIHJnYigyMDgsIDIwOCwg

MjA4KTsNCiAgICAgICAgICAgIHdpZHRoOiA2MCU7DQogICAgICAgICAgICBjb2xvcjog

cmdiKDc3LCA3NywgNzcpOw0KICAgICAgICAgICAgZGlzcGxheTogYmxvY2s7DQogICAg

ICAgIH0NCg0KICAgICAgICAgICAgLm1jZUlucHV0W3R5cGU9InJhZGlvIl0sIC5tY2VJ

bnB1dFt0eXBlPSJjaGVja2JveCJdIHsNCiAgICAgICAgICAgICAgICBmbG9hdDogbGVm

dDsNCiAgICAgICAgICAgICAgICBtYXJnaW4tcmlnaHQ6IDEycHg7DQogICAgICAgICAg

ICAgICAgZGlzcGxheTogaW5saW5lOw0KICAgICAgICAgICAgICAgIHdpZHRoOiBhdXRv

ICFpbXBvcnRhbnQ7DQogICAgICAgICAgICB9DQoNCiAgICAgICAgLm1jZUxhYmVsID4g

Lm1jZUlucHV0IHsNCiAgICAgICAgICAgIG1hcmdpbi1ib3R0b206IDBweDsNCiAgICAg

ICAgICAgIG1hcmdpbi10b3A6IDJweDsNCiAgICAgICAgfQ0KDQogICAgICAgIC5tY2VM

YWJlbCB7DQogICAgICAgICAgICBkaXNwbGF5OiBibG9jazsNCiAgICAgICAgfQ0KDQog

ICAgICAgIC5tY2VUZXh0IHAgew0KICAgICAgICAgICAgY29sb3I6IHJnYigwLCAwLCAw

KTsNCiAgICAgICAgICAgIGZvbnQtZmFtaWx5OiBBcmlhbCwgIkhlbHZldGljYSBOZXVl

IiwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOw0KICAgICAgICAgICAgZm9udC1zaXplOiAx

NnB4Ow0KICAgICAgICAgICAgZm9udC13ZWlnaHQ6IG5vcm1hbDsNCiAgICAgICAgICAg

IGxpbmUtaGVpZ2h0OiAxLjU7DQogICAgICAgICAgICB0ZXh0LWFsaWduOiBjZW50ZXI7

DQogICAgICAgICAgICBsZXR0ZXItc3BhY2luZzogMHB4Ow0KICAgICAgICAgICAgZGly

ZWN0aW9uOiBsdHI7DQogICAgICAgIH0NCg0KICAgICAgICAubWNlVGV4dCBoMSB7DQog

ICAgICAgICAgICBjb2xvcjogcmdiKDAsIDAsIDApOw0KICAgICAgICAgICAgZm9udC1m

YW1pbHk6ICJQbGF5ZmFpciBEaXNwbGF5IiwgR2VvcmdpYSwgIlRpbWVzIE5ldyBSb21h

biIsIHNlcmlmOw0KICAgICAgICAgICAgZm9udC1zaXplOiAzMXB4Ow0KICAgICAgICAg

ICAgZm9udC13ZWlnaHQ6IGJvbGQ7DQogICAgICAgICAgICBsaW5lLWhlaWdodDogMS41

Ow0KICAgICAgICAgICAgdGV4dC1hbGlnbjogY2VudGVyOw0KICAgICAgICAgICAgbGV0

dGVyLXNwYWNpbmc6IDBweDsNCiAgICAgICAgICAgIGRpcmVjdGlvbjogbHRyOw0KICAg

ICAgICB9DQoNCiAgICAgICAgLm1jZVRleHQgYSB7DQogICAgICAgICAgICBjb2xvcjog

cmdiKDAsIDEwOCwgMTE1KTsNCiAgICAgICAgICAgIGZvbnQtc3R5bGU6IG5vcm1hbDsN

CiAgICAgICAgICAgIGZvbnQtd2VpZ2h0OiBub3JtYWw7DQogICAgICAgICAgICB0ZXh0

LWRlY29yYXRpb246IHVuZGVybGluZTsNCiAgICAgICAgICAgIGRpcmVjdGlvbjogbHRy

Ow0KICAgICAgICB9DQoNCiAgICAgICAgQG1lZGlhIG9ubHkgc2NyZWVuIGFuZCAobWF4

LXdpZHRoOiA0ODBweCkgew0KICAgICAgICAgICAgLm1jZVRleHQgcCB7DQogICAgICAg

ICAgICAgICAgZm9udC1zaXplOiAxNnB4ICFpbXBvcnRhbnQ7DQogICAgICAgICAgICAg

ICAgbGluZS1oZWlnaHQ6IDEuNSAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgfQ0KICAg

ICAgICB9DQoNCiAgICAgICAgQG1lZGlhIG9ubHkgc2NyZWVuIGFuZCAobWF4LXdpZHRo

OiA0ODBweCkgew0KICAgICAgICAgICAgLm1jZVRleHQgaDEgew0KICAgICAgICAgICAg

ICAgIGZvbnQtc2l6ZTogMzFweCAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgICAgIGxp

bmUtaGVpZ2h0OiAxLjUgIWltcG9ydGFudDsNCiAgICAgICAgICAgIH0NCiAgICAgICAg

fQ0KDQogICAgICAgIEBtZWRpYSBvbmx5IHNjcmVlbiBhbmQgKG1heC13aWR0aDogNDgw

cHgpIHsNCiAgICAgICAgICAgIC5tY2VCbG9ja0NvbnRhaW5lciB7DQogICAgICAgICAg

ICAgICAgcGFkZGluZy1sZWZ0OiAxNnB4ICFpbXBvcnRhbnQ7DQogICAgICAgICAgICAg

ICAgcGFkZGluZy1yaWdodDogMTZweCAhaW1wb3J0YW50Ow0KICAgICAgICAgICAgfQ0K

ICAgICAgICB9DQoNCiAgICAgICAgI2RhdGFCbG9ja0lkLTEwIHAsICNkYXRhQmxvY2tJ

ZC0xMCBoMSwgI2RhdGFCbG9ja0lkLTEwIGgyLCAjZGF0YUJsb2NrSWQtMTAgaDMsICNk

YXRhQmxvY2tJZC0xMCBoNCwgI2RhdGFCbG9ja0lkLTEwIHVsIHsNCiAgICAgICAgICAg

IHRleHQtYWxpZ246IGNlbnRlcjsNCiAgICAgICAgfQ0KICAgIDwvc3R5bGU+DQo8L2hl

YWQ+DQo8Ym9keT4NCiAgICA8IS0tKnxJRjpNQ19QUkVWSUVXX1RFWFR8Ki0tPg0KICAg

IDwhLS1baWYgIWd0ZSBtc28gOV0+PCEtLS0tPjxzcGFuIGNsYXNzPSJtY25QcmV2aWV3

VGV4dCIgc3R5bGU9ImRpc3BsYXk6bm9uZTsgZm9udC1zaXplOjBweDsgbGluZS1oZWln

aHQ6MHB4OyBtYXgtaGVpZ2h0OjBweDsgbWF4LXdpZHRoOjBweDsgb3BhY2l0eTowOyBv

dmVyZmxvdzpoaWRkZW47IHZpc2liaWxpdHk6aGlkZGVuOyBtc28taGlkZTphbGw7Ij5J

bmNyZWFzZSB5b3VyIGluc3RhZ3JhbSBmb2xsb3dlcnM8L3NwYW4+PCEtLTwhW2VuZGlm

XS0tPg0KICAgIDwhLS0qfEVORDpJRnwqLS0+DQogICAgPGNlbnRlcj4NCiAgICAgICAg

PHRhYmxlIGJvcmRlcj0iMCIgY2VsbHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5nPSIwIiBo

ZWlnaHQ9IjEwMCUiIHdpZHRoPSIxMDAlIiBpZD0iYm9keVRhYmxlIiBzdHlsZT0iYmFj

a2dyb3VuZC1jb2xvcjogcmdiKDIzNCwgMjM2LCAyMjYpOyI+DQogICAgICAgICAgICA8

dGJvZHk+DQogICAgICAgICAgICAgICAgPHRyPg0KICAgICAgICAgICAgICAgICAgICA8

dGQgY2xhc3M9ImJvZHlDZWxsIiBhbGlnbj0iY2VudGVyIiB2YWxpZ249InRvcCI+DQog

ICAgICAgICAgICAgICAgICAgICAgICA8dGFibGUgaWQ9InJvb3QiIGJvcmRlcj0iMCIg

Y2VsbHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5nPSIwIiB3aWR0aD0iMTAwJSI+DQogICAg

ICAgICAgICAgICAgICAgICAgICAgICAgPHRib2R5IGRhdGEtYmxvY2staWQ9IjE0IiBj

bGFzcz0ibWNlV3JhcHBlciI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

IDx0cj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0ZCBhbGln

bj0iY2VudGVyIiB2YWxpZ249InRvcCIgY2xhc3M9Im1jZVdyYXBwZXJPdXRlciI+DQog

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPCEtLVtpZiAoZ3Rl

IG1zbyA5KXwoSUUpXT48dGFibGUgYWxpZ249ImNlbnRlciIgYm9yZGVyPSIwIiBjZWxs

c3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAiIHdpZHRoPSI2NjAiIHN0eWxlPSJ3aWR0

aDo2NjBweDsiPjx0cj48dGQ+PCFbZW5kaWZdLS0+PHRhYmxlIGJvcmRlcj0iMCIgY2Vs

bHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5nPSIwIiB3aWR0aD0iMTAwJSIgc3R5bGU9Im1h

eC13aWR0aDo2NjBweCIgcm9sZT0icHJlc2VudGF0aW9uIj4NCiAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHRib2R5Pg0KICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHRyPg0KICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0ZCBzdHls

ZT0iYmFja2dyb3VuZC1jb2xvcjojZDJjM2IxO2JhY2tncm91bmQtcG9zaXRpb246Y2Vu

dGVyO2JhY2tncm91bmQtcmVwZWF0Om5vLXJlcGVhdDtiYWNrZ3JvdW5kLXNpemU6Y292

ZXIiIGNsYXNzPSJtY2VXcmFwcGVySW5uZXIiIHZhbGlnbj0idG9wIj4NCiAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHRh

YmxlIGFsaWduPSJjZW50ZXIiIGJvcmRlcj0iMCIgY2VsbHBhZGRpbmc9IjAiIGNlbGxz

cGFjaW5nPSIwIiB3aWR0aD0iMTAwJSIgcm9sZT0icHJlc2VudGF0aW9uIiBkYXRhLWJs

b2NrLWlkPSIxMyI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICA8dGJvZHk+DQogICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHRyIGNs

YXNzPSJtY2VSb3ciPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dGQgc3R5bGU9ImJhY2tncm91

bmQtcG9zaXRpb246Y2VudGVyO2JhY2tncm91bmQtcmVwZWF0Om5vLXJlcGVhdDtiYWNr

Z3JvdW5kLXNpemU6Y292ZXIiIHZhbGlnbj0idG9wIj4NCiAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgIDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0i

MCIgd2lkdGg9IjEwMCUiIHJvbGU9InByZXNlbnRhdGlvbiI+DQogICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgPHRib2R5Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8

dHI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dGQgc3R5bGU9InBh

ZGRpbmctdG9wOjA7cGFkZGluZy1ib3R0b206MCIgY2xhc3M9Im1jZUNvbHVtbiIgZGF0

YS1ibG9jay1pZD0iLTQiIHZhbGlnbj0idG9wIiBjb2xzcGFuPSIxMiIgd2lkdGg9IjEw

MCUiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0YWJsZSBi

b3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgd2lkdGg9IjEw

MCUiIHJvbGU9InByZXNlbnRhdGlvbiI+DQogICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgIDx0Ym9keT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgIDx0cj48dGQgc3R5bGU9ImJhY2tncm91bmQtY29sb3I6

dHJhbnNwYXJlbnQ7cGFkZGluZy10b3A6MDtwYWRkaW5nLWJvdHRvbTowO3BhZGRpbmct

cmlnaHQ6MDtwYWRkaW5nLWxlZnQ6MCIgY2xhc3M9Im1jZUJsb2NrQ29udGFpbmVyIiB2

YWxpZ249InRvcCI+PHRhYmxlIGJvcmRlcj0iMCIgY2VsbHBhZGRpbmc9IjAiIGNlbGxz

cGFjaW5nPSIwIiB3aWR0aD0iMTAwJSIgc3R5bGU9ImJhY2tncm91bmQtY29sb3I6dHJh

bnNwYXJlbnQiIHJvbGU9InByZXNlbnRhdGlvbiIgZGF0YS1ibG9jay1pZD0iMiI+PHRi

b2R5Pjx0cj48dGQgc3R5bGU9Im1pbi13aWR0aDoxMDAlO2JvcmRlci10b3A6MjBweCBz

b2xpZCB0cmFuc3BhcmVudCIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj48L3Rib2R5Pjwv

dGFibGU+PC90ZD48L3RyPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgPHRyPjx0ZCBzdHlsZT0icGFkZGluZy10b3A6MTJweDtwYWRkaW5n

LWJvdHRvbToxMnB4O3BhZGRpbmctcmlnaHQ6NDhweDtwYWRkaW5nLWxlZnQ6NDhweCIg

Y2xhc3M9Im1jZUJsb2NrQ29udGFpbmVyIiBhbGlnbj0iY2VudGVyIiB2YWxpZ249InRv

cCI+PGEgaHJlZj0iaHR0cHM6Ly93d3cuY2x1b2RtZS5jb20vcmVkaXJlY3QuYXNweD9z

PVYmZT0rTXNzeDE1aWdPQjJCYzg5SEpEbHl6SHlvaFNKalJaeUxFOFdPdkRJWnZZPSIg

c3R5bGU9ImRpc3BsYXk6YmxvY2siIHRhcmdldD0iX2JsYW5rIiBkYXRhLWJsb2NrLWlk

PSIzIj48aW1nIHdpZHRoPSIxNTAiIGhlaWdodD0iYXV0byIgc3R5bGU9ImJvcmRlcjow

O3dpZHRoOjE1MHB4O2hlaWdodDphdXRvO21heC13aWR0aDoxMDAlO2Rpc3BsYXk6Ymxv

Y2s7IGJvcmRlci1yYWRpdXM6IDZweDsiIGFsdD0iTG9nbyIgc3JjPSJodHRwczovL21j

dXNlcmNvbnRlbnQuY29tLzNlODkwZDkzNWIxMDc3NDc5YmRmYjA4ZDgvaW1hZ2VzL2Rk

MjdmNTYzLTRkNzctNzM0NS1kOGFkLTVlYWY2YTFlNDk3Zi5qcGciIGNsYXNzPSIiIC8+

PC9hPjwvdGQ+PC90cj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgIDx0cj48dGQgc3R5bGU9InBhZGRpbmctdG9wOjEycHg7cGFkZGluZy1i

b3R0b206MTJweDtwYWRkaW5nLXJpZ2h0OjA7cGFkZGluZy1sZWZ0OjAiIGNsYXNzPSJt

Y2VCbG9ja0NvbnRhaW5lciIgYWxpZ249ImNlbnRlciIgdmFsaWduPSJ0b3AiPjxhIGhy

ZWY9Imh0dHBzOi8vd3d3LmNsdW9kbWUuY29tL3JlZGlyZWN0LmFzcHg/cz1WJmU9K01z

c3gxNWlnT0IyQmM4OUhKRGx5ekh5b2hTSmpSWnlMRThXT3ZESVp2WT0iIHN0eWxlPSJk

aXNwbGF5OmJsb2NrIiB0YXJnZXQ9Il9ibGFuayIgZGF0YS1ibG9jay1pZD0iMTYiPjxp

bWcgd2lkdGg9IjUzMyIgaGVpZ2h0PSJhdXRvIiBzdHlsZT0iYm9yZGVyOjA7d2lkdGg6

NTMzcHg7aGVpZ2h0OmF1dG87bWF4LXdpZHRoOjEwMCU7ZGlzcGxheTpibG9jayIgYWx0

PSIiIHNyYz0iaHR0cHM6Ly9pLmliYi5jby8yWUMwUmo0L1ZJUC5qcGciIHJvbGU9InBy

ZXNlbnRhdGlvbiIgY2xhc3M9ImltYWdlRHJvcFpvbmUiIC8+PC9hPjwvdGQ+PC90cj4N

CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0cj48

dGQgc3R5bGU9InBhZGRpbmctdG9wOjEycHg7cGFkZGluZy1ib3R0b206MTJweDtwYWRk

aW5nLXJpZ2h0OjI0cHg7cGFkZGluZy1sZWZ0OjI0cHgiIGNsYXNzPSJtY2VCbG9ja0Nv

bnRhaW5lciIgdmFsaWduPSJ0b3AiPjxkaXYgZGF0YS1ibG9jay1pZD0iNSIgY2xhc3M9

Im1jZVRleHQiIGlkPSJkYXRhQmxvY2tJZC01IiBzdHlsZT0id2lkdGg6MTAwJSI+PGgx

PkV4Y2x1c2l2ZSBHcm93dGggSW5zdGFncmFtIFNlcnZpY2U8L2gxPjxwIGNsYXNzPSJs

YXN0LWNoaWxkIj5UcmFuc2Zvcm0geW91ciBJbnN0YWdyYW0gaW50byBhIHBvd2VyZnVs

IGJyYW5kIGFzc2V0OiA8Yj48YSBocmVmPSJodHRwczovL3d3dy5jbHVvZG1lLmNvbS9y

ZWRpcmVjdC5hc3B4P3M9ViZlPStNc3N4MTVpZ09CMkJjODlISkRseXpIeW9oU0pqUlp5

TEU4V092REladlk9IiB0YXJnZXQ9Il9ibGFuayI+dmlwLWZvbGxvd2VyczwvYT48L2I+

IOKcqDwvcD48L2Rpdj48L3RkPjwvdHI+DQogICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICA8dHI+DQogICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgPHRkIHN0eWxlPSJwYWRkaW5nLXRvcDoxMnB4

O3BhZGRpbmctYm90dG9tOjEycHg7cGFkZGluZy1yaWdodDo0OHB4O3BhZGRpbmctbGVm

dDo0OHB4IiBjbGFzcz0ibWNlQmxvY2tDb250YWluZXIiIGFsaWduPSJjZW50ZXIiIHZh

bGlnbj0idG9wIj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgPHRhYmxlIGFsaWduPSJjZW50ZXIiIGJvcmRlcj0iMCIgY2Vs

bHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5nPSIwIiByb2xlPSJwcmVzZW50YXRpb24iIGRh

dGEtYmxvY2staWQ9IjYiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgPHRib2R5Pg0KICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0ciBjbGFz

cz0ibWNlU3RhbmRhcmRCdXR0b24iPjx0ZCBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjoj

MDA2YzczO2JvcmRlci1yYWRpdXM6NTBweDt0ZXh0LWFsaWduOmNlbnRlciIgY2xhc3M9

Im1jZUJ1dHRvbiIgdmFsaWduPSJ0b3AiPjxhIGhyZWY9Imh0dHBzOi8vd3d3LmNsdW9k

bWUuY29tL3JlZGlyZWN0LmFzcHg/cz1WJmU9K01zc3gxNWlnT0IyQmM4OUhKRGx5ekh5

b2hTSmpSWnlMRThXT3ZESVp2WT0iIHRhcmdldD0iX2JsYW5rIiBzdHlsZT0iYmFja2dy

b3VuZC1jb2xvcjojMDAwMDAwO2JvcmRlci1yYWRpdXM6NTBweDtib3JkZXI6MnB4IHNv

bGlkICMwMDAwMDA7Y29sb3I6I2ZmZmZmZjtkaXNwbGF5OmJsb2NrO2ZvbnQtZmFtaWx5

OkFyaWFsLCAnSGVsdmV0aWNhIE5ldWUnLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7Zm9u

dC1zaXplOjIwcHg7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3R5bGU6bm9ybWFsO3Bh

ZGRpbmc6MTZweCAyOHB4O3RleHQtZGVjb3JhdGlvbjpub25lO21pbi13aWR0aDozMHB4

O3RleHQtYWxpZ246Y2VudGVyO2RpcmVjdGlvbjpsdHI7bGV0dGVyLXNwYWNpbmc6MHB4

Ij48Yj5Hcm93IE5vdzwvYj48L2E+PC90ZD48L3RyPg0KICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0cj4NCiAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgPCEtLVtpZiBtc29dPg0KICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dGQgYWxpZ249

ImNlbnRlciI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgIDx2OnJvdW5kcmVjdCB4bWxuczp2PSJ1cm46

c2NoZW1hcy1taWNyb3NvZnQtY29tOnZtbCINCiAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgeG1sbnM6dz0i

dXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCINCiAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgaHJlZj0iaHR0cHM6Ly93d3cuY2x1b2RtZS5jb20vcmVkaXJlY3QuYXNweD9zPVYm

ZT0rTXNzeDE1aWdPQjJCYzg5SEpEbHl6SHlvaFNKalJaeUxFOFdPdkRJWnZZPSINCiAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgc3R5bGU9InYtdGV4dC1hbmNob3I6bWlkZGxlOyB3aWR0aDoxMzQu

NjlweDsgaGVpZ2h0OjU0cHg7Ig0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBhcmNzaXplPSIzNyUiDQog

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgIHN0cm9rZWNvbG9yPSIjMDA2YzczIg0KICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBz

dHJva2V3ZWlnaHQ9IjJweCINCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZmlsbGNvbG9yPSIjMDA2Yzcz

Ij4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgPHY6c3Ryb2tlIGRhc2hzdHlsZT0ic29saWQiLz4NCiAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgPHc6YW5jaG9ybG9jayAvPg0KICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8Y2VudGVy

IHN0eWxlPSINCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgY29sb3I6ICNmZmZmZmY7DQogICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgIGRpc3BsYXk6IGJsb2NrOw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBmb250LWZhbWlseTogQXJp

YWwsICdIZWx2ZXRpY2EgTmV1ZScsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsNCiAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgZm9udC1zaXplOiAxNjsNCiAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZm9udC1zdHlsZTog

bm9ybWFsOw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICBmb250LXdlaWdodDogbm9ybWFsOw0KICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICBsZXR0ZXItc3BhY2luZzogMHB4Ow0KICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB0ZXh0LWRl

Y29yYXRpb246IG5vbmU7DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHRleHQtYWxpZ246IGNlbnRlcjsN

CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgZGlyZWN0aW9uOiBsdHI7Ig0KICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA+DQog

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgIEdyb3cgTm93DQogICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvY2VudGVyPg0KICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICA8L3Y6cm91bmRyZWN0Pg0KICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RkPg0KICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICA8IVtlbmRpZl0tLT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3RyPg0KICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90

Ym9keT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgPC90YWJsZT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICA8L3RkPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgPC90cj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgIDx0cj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICA8dGQgc3R5bGU9ImJhY2tncm91bmQtY29sb3I6

dHJhbnNwYXJlbnQ7cGFkZGluZy10b3A6MDtwYWRkaW5nLWJvdHRvbTowO3BhZGRpbmct

cmlnaHQ6MDtwYWRkaW5nLWxlZnQ6MCIgY2xhc3M9Im1jZUJsb2NrQ29udGFpbmVyIiB2

YWxpZ249InRvcCI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgIDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBj

ZWxsc3BhY2luZz0iMCIgd2lkdGg9IjEwMCUiIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9y

OnRyYW5zcGFyZW50IiByb2xlPSJwcmVzZW50YXRpb24iIGRhdGEtYmxvY2staWQ9Ijci

Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgPHRib2R5Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDx0cj48dGQgc3R5bGU9Im1pbi13aWR0

aDoxMDAlO2JvcmRlci10b3A6MjBweCBzb2xpZCB0cmFuc3BhcmVudCIgdmFsaWduPSJ0

b3AiPjwvdGQ+PC90cj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgIDwvdGJvZHk+DQogICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGFibGU+DQogICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD4NCiAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdHI+DQog

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dHI+DQog

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHRk

IHN0eWxlPSJwYWRkaW5nLXRvcDo4cHg7cGFkZGluZy1ib3R0b206OHB4O3BhZGRpbmct

cmlnaHQ6OHB4O3BhZGRpbmctbGVmdDo4cHgiIGNsYXNzPSJtY2VMYXlvdXRDb250YWlu

ZXIiIHZhbGlnbj0idG9wIj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgPHRhYmxlIGFsaWduPSJjZW50ZXIiIGJvcmRlcj0i

MCIgY2VsbHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5nPSIwIiB3aWR0aD0iMTAwJSIgcm9s

ZT0icHJlc2VudGF0aW9uIiBkYXRhLWJsb2NrLWlkPSIxMiIgaWQ9InNlY3Rpb25fZDI1

MjBmOWFlYmNhODI4YmU3M2FhNjcwZGIwNzExNGMiIGNsYXNzPSJtY2VGb290ZXJTZWN0

aW9uIj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgIDx0Ym9keT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dHIgY2xhc3M9Im1jZVJvdyI+

DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgIDx0ZCBzdHlsZT0iYmFja2dyb3VuZC1wb3NpdGlvbjpjZW50

ZXI7YmFja2dyb3VuZC1yZXBlYXQ6bm8tcmVwZWF0O2JhY2tncm91bmQtc2l6ZTpjb3Zl

ciIgdmFsaWduPSJ0b3AiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHRhYmxlIGJvcmRlcj0i

MCIgY2VsbHBhZGRpbmc9IjAiIGNlbGxzcGFjaW5nPSIxMiIgd2lkdGg9IjEwMCUiIHJv

bGU9InByZXNlbnRhdGlvbiI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHRib2R5Pg0K

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICA8dHI+DQogICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICA8dGQgc3R5bGU9InBhZGRpbmctdG9wOjA7cGFkZGluZy1ib3R0b206

MDttYXJnaW4tYm90dG9tOjEycHgiIGNsYXNzPSJtY2VDb2x1bW4iIGRhdGEtYmxvY2st

aWQ9Ii0zIiB2YWxpZ249InRvcCIgY29sc3Bhbj0iMTIiIHdpZHRoPSIxMDAlIj4NCiAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dGFibGUgYm9yZGVyPSIwIiBj

ZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiIHdpZHRoPSIxMDAlIiByb2xlPSJw

cmVzZW50YXRpb24iPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICA8dGJvZHk+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICA8dHI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgPHRkIHN0eWxlPSJwYWRkaW5nLXRvcDoxMnB4O3BhZGRpbmctYm90dG9tOjBweDtw

YWRkaW5nLXJpZ2h0OjA7cGFkZGluZy1sZWZ0OjAiIGNsYXNzPSJtY2VCbG9ja0NvbnRh

aW5lciIgYWxpZ249ImNlbnRlciIgdmFsaWduPSJ0b3AiPg0KICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8YSBocmVmPSJodHRwczov

L3d3dy5jbHVvZG1lLmNvbS9yZWRpcmVjdC5hc3B4P3M9ViZlPStNc3N4MTVpZ09CMkJj

ODlISkRseXpIeW9oU0pqUlp5TEU4V092REladlk9IiBzdHlsZT0iZGlzcGxheTpibG9j

ayIgdGFyZ2V0PSJfYmxhbmsiIGRhdGEtYmxvY2staWQ9IjMiPjxpbWcgZGF0YS1ibG9j

ay1pZD0iOSIgd2lkdGg9IjE1MCIgaGVpZ2h0PSJhdXRvIiBzdHlsZT0id2lkdGg6MTUw

cHg7aGVpZ2h0OmF1dG87bWF4LXdpZHRoOjEwMCU7ZGlzcGxheTpibG9jazsgYm9yZGVy

LXJhZGl1czogNnB4OyIgYWx0PSJMb2dvIiBzcmM9Imh0dHBzOi8vbWN1c2VyY29udGVu

dC5jb20vM2U4OTBkOTM1YjEwNzc0NzliZGZiMDhkOC9pbWFnZXMvZGQyN2Y1NjMtNGQ3

Ny03MzQ1LWQ4YWQtNWVhZjZhMWU0OTdmLmpwZyIgY2xhc3M9IiIgLz48L2E+DQogICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD4NCiAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdHI+DQogICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8dHI+PHRkIHN0eWxl

PSJwYWRkaW5nLXRvcDowcHg7cGFkZGluZy1ib3R0b206MTJweDtwYWRkaW5nLXJpZ2h0

OjE2cHg7cGFkZGluZy1sZWZ0OjE2cHgiIGNsYXNzPSJtY2VCbG9ja0NvbnRhaW5lciIg

YWxpZ249ImNlbnRlciIgdmFsaWduPSJ0b3AiPjxkaXYgZGF0YS1ibG9jay1pZD0iMTAi

IGNsYXNzPSJtY2VUZXh0IiBpZD0iZGF0YUJsb2NrSWQtMTAiIHN0eWxlPSJkaXNwbGF5

OmlubGluZS1ibG9jazt3aWR0aDoxMDAlOyB3aGl0ZS1zcGFjZTogbm9ybWFsICFpbXBv

cnRhbnQiPg0KCQkJCQkJCQkJCQkJCQkJCQkJPHAgY2xhc3M9Imxhc3QtY2hpbGQiPjxl

bT48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMnB4Ij5Db3B5cmlnaHQgKEMpIDIwMTQt

MjAyNC4gQWxsIHJpZ2h0IHJlc2VydmVkLjwvc3Bhbj48L2VtPjxici8+PHNwYW4gc3R5

bGU9ImZvbnQtc2l6ZTogMTJweCI+V2FudCB0byBjaGFuZ2UgaG93IHlvdSByZWNlaXZl

IHRoZXNlIGVtYWlscz88L3NwYW4+PGJyLz48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAx

MnB4Ij5Zb3UgY2FuIDwvc3Bhbj48YSBocmVmPSJodHRwczovL3d3dy5jbHVvZG1lLmNv

bS91bnN1YnNjcmliZS5hc3B4P1NJVEU9VlBGJkVNQUlMPXNhbGVzQG5rLmNhIj48c3Bh

biBzdHlsZT0iZm9udC1zaXplOiAxMnB4Ij51bnN1YnNjcmliZSBmcm9tIHRoaXMgbGlz

dDwvc3Bhbj48L2E+LjwvcD48L2Rpdj48L3RkPjwvdHI+DQogICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgIDwvdGJvZHk+DQogICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgPC90YWJsZT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgIDwvdGQ+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdHI+DQogICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgPC90Ym9keT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGFibGU+

DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgIDwvdGQ+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90cj4NCiAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGJv

ZHk+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgIDwvdGFibGU+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgPC90ZD4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgIDwvdHI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgIDwvdGJvZHk+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgPC90YWJsZT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

IDwvdGQ+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdHI+DQogICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgPC90Ym9keT4NCiAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwv

dGFibGU+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGQ+DQogICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90cj4N

CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgIDwvdGJvZHk+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGFibGU+DQogICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD4NCiAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdHI+DQogICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvdGJvZHk+DQog

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90YWJsZT48IS0t

W2lmIChndGUgbXNvIDkpfChJRSldPjwvdGQ+PC90cj48L3RhYmxlPjwhW2VuZGlmXS0t

Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD4NCiAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90cj4NCiAgICAgICAgICAgICAgICAg

ICAgICAgICAgICA8L3Rib2R5Pg0KICAgICAgICAgICAgICAgICAgICAgICAgPC90YWJs

ZT4NCiAgICAgICAgICAgICAgICAgICAgPC90ZD4NCiAgICAgICAgICAgICAgICA8L3Ry

Pg0KICAgICAgICAgICAgPC90Ym9keT4NCiAgICAgICAgPC90YWJsZT4NCiAgICA8L2Nl

bnRlcj4NCjwvYm9keT4NCjwvaHRtbD4=





Canada REvenue agency phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Aug 2024 07:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1siwOm-00000000I9p-1CHp

for dave@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 07:38:16 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Aug 2024 07:38:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail1.bellabeal.online ([86.48.6.240]:40394)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1siuQI-00000000788-32tp

for sales@nk.ca;

Tue, 27 Aug 2024 05:31:49 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=s1; d=bellabeal.online;

h=MIME-Version:From:To:Date:Subject:Content-Type:Content-Transfer-Encoding:

Message-ID; i=support@bellabeal.online;

bh=YqzWLxjU2K1cTNP85sLfALG7iTkoW2nulQnFynG146s=;

b=kvCkrYwIH+x7tDVZbLd+vtHOvwuRfH576ve7tRgZVINNzk2oJzCCBs7tEp2oXj10SBeZJXUfFQjX

+v2f15lT8/kX6bmbh27MO1poNbaEkL/mfLACaMqjn0tzhEjpDMRLX4Y58utRUCixxm174Tm/xqoE

6w1lL5qI1zsDImRnAMdeSue+NLgFWhvkpugjzeacGy7Ncc3g9HnqTPgqBoJKrlYCeAvWV7wJLYiH

AZbRdEecioFQRXy4EZJk7G0x0O/Qi15dt36ATZAAdX42HxYijQ/fdK7ymiycAHPg7loOHRs3/ru/

nH7cBsk2wk/ijEIgUGaxFQ5f/eD6I6QGnAH/ag==

MIME-Version: 1.0

From: "Revenue Agency"

To: sales@nk.ca

Date: 27 Aug 2024 07:29:38 -0400

Subject: Updated Tax Document!

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

Message-ID: <0.0.4.F20.1DAF8746725774E.0@mail1.bellabeal.online>

X-Spam_score: 17.6

X-Spam_score_int: 176

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: The Revenue Agency sent you new mail online called: Updated

Tax Document



Content analysis details: (17.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: beneficial-industrious-plane.glitch.me]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: bellabeal.online (online)]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.6 MIXED_HREF_CASE Has href in mixed case

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} Updated Tax Document!



 

=0D=0A



The Revenue Agency  sent you new mail=

online called:

Updated Tax Document

This mail may require=

your attention.
 

=0D=0A

If you have My Account, sign-in and=

click on "Mail" to read your mail.

=0D=0A


rel=3D"noopener noreferrer" target=3D_blank>View Document Here

=

=0D=0A

 

=0D=0A



If you signed up to receive mail online=

but don't have My Account, go to the  web page to register.

This=

is an automated email message. Please do not reply.

=0D=0A

 





Casino phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Aug 2024 07:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1siwOP-00000000I7Z-2r70

for dave@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 07:37:53 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Aug 2024 07:37:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 23-92-28-213.ip.linodeusercontent.com ([23.92.28.213]:46465 helo=Diploma-Work.ru)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1siuGX-000000006NR-23hT

for root@doctor.nl2k.ab.ca;

Tue, 27 Aug 2024 05:23:23 -0600

Date: Tue, 27 Aug 2024 11:10:44 +0000

Message-Id: <521426275388781.8.USN1560380259@Diploma-Work.ru>

From: "BONUS"@doctor.nl2k.ab.ca

Subject: 150 Chances

Content-Type: text/html; charset="UTF-8"

Mime-Version: 1.0

Content-Transfer-Encoding: 8bit

X-Spam_score: 19.5

X-Spam_score_int: 195

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Spin Away – Only Casino Offers Spin Away Play the latest

and best Casino games at SpinAway



Content analysis details: (19.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.92.28.213 listed in dnsbl.ahbl.org]

[23.92.28.213 listed in dnsbl.ahbl.org]

[23.92.28.213 listed in dnsbl.ahbl.org]

[23.92.28.213 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.92.28.213 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.92.28.213 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.92.28.213 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.92.28.213 listed in dnsbl.ahbl.org]

0.0 TVD_RCVD_IP Message was received from an IP address

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.8 UPPERCASE_50_75 message body is 50-75% uppercase

0.3 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

4.0 DYNAMIC_IMGUR dynamic IP + hosted image

3.0 HOSTED_IMG_MULTI_PUB_01 Multiple hosted images at public site

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} 150 Chances







Spin Away – Only Casino Offers
















Spin Away



















































































Play the latest and best Casino games at SpinAway























100 FREE SPINS +




100% UP TO $1500 WELCOME BONUS FOR YOU!























DON'T WAIT ANY LONGER - IT'S YOUR TIME TO PLAY































REGISTER HERE

















Image













































width="1" height="1" border="0">







Desperation spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Aug 2024 11:19:00 -0600

Received: from mail-pl1-f182.google.com ([209.85.214.182]:53286)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sidMW-00000000Cns-3LQ1

for dave@doctor.nl2k.ab.ca;

Mon, 26 Aug 2024 11:18:44 -0600

Received: by mail-pl1-f182.google.com with SMTP id d9443c01a7336-1fec34f94abso44131115ad.2

for ; Mon, 26 Aug 2024 10:16:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1724692605; x=1725297405; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=13iga2Q7SVDBqKfha9DnsAwakrZMvLGqZ07/lGsIHSg=;

b=L9fTJd1/knKwEEthT0xyBeHF2oAPxfm8Lmn5WgZ/lPUHdDs3TZbhm+xVbG37o6/Y84

I5yuNPUuLZSfRAYykU0x2hMGomeyxxo7S/gT9XzjQC6tVAG/otW7zoJmN05e0zUEfvs3

KzYJiH3LjkddOtCmNlDiZhiAuX5qU5oAMYbGZCz96/ZDDo8t23jr8HNBG6+MaZ89AaVF

hagJxahzYq4ohSQva/BmJxNQt912wWIHPlmJcXpPlLPLCkfNFlBj2FwUZK4Izq9cJtTm

ocSJmFWHLMScSs8+evq/eASmz1W769mww7LyLOdXEgdJM9cVhI2HVc/7Fq0nAQa8/ql+

FKuQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1724692605; x=1725297405;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=13iga2Q7SVDBqKfha9DnsAwakrZMvLGqZ07/lGsIHSg=;

b=gH2Cx+byHAluynScE4Zl0NOMNhruIe1xHBlYKgyq412scBuHt9TxfcxCSdRrtwUGZM

AubabjNcZyateLlFtrkOhxCWklUJxGUDca9WxkQVDxz1zgN9eGE/tWifZgzEkg/UQzI/

1ZUvr3HSFoHr/zl6GfvjXIiJ/yX5Y2RykPmkiCUHpHUQenincEvMTvuLoeHhqFYwJi7G

YtDzRJJ+TJXPWyN2WTrh+GaRxL5nJ71P/DeBa7YT4KWWf59AwJcGfcVsX3+pbq5N/9eE

aNolXqn8U3ieS+BNed/GjDm+bkVCJiSNmEJ0HC+qKoNwnU5k6WhlHjTIstinKdgOZvEZ

a35A==

X-Gm-Message-State: AOJu0YycMyTUaKocedP+MJy3W/Ob9C6etjAm0jM3LyO/wKLLsRUal4/J

NdEIciF5DKQGtRY6G0QJhiQiZ+P81z1ueFh3DIHkPnEISsPkt2DmeaKqynfmHhI5XMHIN/3v/3O

/PUcY+r6yWhNX8uUPhzNtNqyuQGn8

X-Google-Smtp-Source: AGHT+IGA7Em8mx9cjelWiPZo82DpmjXYlSs2eqonHq1ksOgEa2KTT5uwnnNKvasQ4itt2qcIqydUZiYj9U0OM/khJpo=

X-Received: by 2002:a17:90b:4f83:b0:2c9:80fd:a111 with SMTP id

98e67ed59e1d1-2d646bf2bd3mr10190774a91.18.1724692604574; Mon, 26 Aug 2024

10:16:44 -0700 (PDT)

MIME-Version: 1.0

From: pernille

Date: Mon, 26 Aug 2024 20:17:31 -0700

Message-ID:

Subject: hello

To: dave@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="0000000000000ae71b0620994aa3"

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- l've been trying to reach you. -- l've been trying to reach

you.



Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.182 listed in dnsbl.ahbl.org]

[209.85.214.182 listed in dnsbl.ahbl.org]

[209.85.214.182 listed in dnsbl.ahbl.org]

[209.85.214.182 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.182 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.182 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.182 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.182 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.182 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.182 listed in will-spam-for-food.eu.org]

[209.85.214.182 listed in will-spam-for-food.eu.org]

[209.85.214.182 listed in will-spam-for-food.eu.org]

[209.85.214.182 listed in will-spam-for-food.eu.org]

[209.85.214.182 listed in will-spam-for-food.eu.org]

[209.85.214.182 listed in will-spam-for-food.eu.org]

[209.85.214.182 listed in will-spam-for-food.eu.org]

[209.85.214.182 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.5 ONE_WORD_SUBJECT Subject with only one lower-case word

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.182 listed in wl.mailspike.net]

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[zandaicvises7(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[zandaicvises7(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} hello



--0000000000000ae71b0620994aa3

Content-Type: text/plain; charset="UTF-8"



--

l've been trying to reach you.



--0000000000000ae71b0620994aa3

Content-Type: text/html; charset="UTF-8"





--
l've been trying to reach you.




--0000000000000ae71b0620994aa3--

Docusign phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Aug 2024 17:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sijQd-000000000et-1GNO

for dave@doctor.nl2k.ab.ca;

Mon, 26 Aug 2024 17:47:19 -0600

Resent-From: The Doctor

Resent-Date: Mon, 26 Aug 2024 17:47:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from correo.santapola.es ([158.255.239.251]:42226)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1siiqH-00000000LTu-48Tz

for sales@nk.ca;

Mon, 26 Aug 2024 17:09:50 -0600

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id 6576278397

for ; Tue, 27 Aug 2024 00:39:22 +0200 (CEST)

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10032)

with ESMTP id RRqUPPPDXtvL for ;

Tue, 27 Aug 2024 00:39:22 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id 925B76E09D

for ; Mon, 26 Aug 2024 23:52:10 +0200 (CEST)

DKIM-Filter: OpenDKIM Filter v2.10.3 correo.santapola.es 925B76E09D

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=santapola.es;

s=E309BD90-106C-11E7-BBB5-E105812D6CEF; t=1724709130;

bh=UpxUUAsV0bfMY4sifUBTsM8rSytkwv69kSfjyS1MuQk=;

h=From:To:MIME-Version:Date:Message-Id;

b=AvJD+nuKDSl1NDm04u52Qt7cSySMUCJ4k0C5F+j9Jv2yoz/Ez4kle4e/cyh44McGw

YcjopzzRxC2kxxgOFesFfJudJIAPg9+l56+bo62PzxVBL/qe5oARGi4EkdlJUKxHij

rX8TXlhB9RAECeDo8ltVzD0OmUIxWJA6pa94cB8SHz1j1wGJZ8pQdoKA4ZVMxWKTyi

T8kRyyrDL56PU7kzmH0r5Iv5Rb4nc5rv9plGDePjGpdsuShYZZLr2b1ygJ3Ag1iySE

mw5JdIsDDQQbMDOv9RZ4N06ssqa9YB9VeGO8E7vcR9Hi7uMaipBUQwq57hG7w9/4ag

+jBwfOXz2R+Ow==

X-Virus-Scanned: amavis at santapola.es

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10026)

with ESMTP id Dehr4T5gsUwX for ;

Mon, 26 Aug 2024 23:52:10 +0200 (CEST)

Received: from HQ1 (unknown [172.208.64.254])

by correo.santapola.es (Postfix) with ESMTPSA id 1D9C863790

for ; Mon, 26 Aug 2024 21:44:26 +0200 (CEST)

From: "DocuSign Via Nk.ca"

Subject: Complete via DocuSign: Signature Requested | 8/26/2024

To:

Content-Type: multipart/related; type="multipart/alternative"; boundary="sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj"

MIME-Version: 1.0

Date: Mon, 26 Aug 2024 19:44:05 +0000

Message-Id: <26052024084419B4384F6300-3728EED4F5@santapola.es>

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:
sign. REVIEW DOCUMENTS https://mehreencreation.com/_id.html?send_id=eh&tvi2_RxT=www.networksolutionsemail.com%2FntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZldVkFuvAlhtlBYyzZlPwcjpjmntpdkptJegwgUbePDCPPdVkFuvAlhtlBY

[...]



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

[172.208.64.254 listed in dnsbl.ahbl.org]

[172.208.64.254 listed in dnsbl.ahbl.org]

[172.208.64.254 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 AC_FROM_MANY_DOTS Multiple periods in From user name

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Complete via DocuSign: Signature Requested | 8/26/2024



This is a multi-part message in MIME format



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj

Content-Type: multipart/alternative;

boundary="joRufYblLx=_ihDwTdayCm79jHZ17TzZxT"



--joRufYblLx=_ihDwTdayCm79jHZ17TzZxT

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








=A0



Hi sales,

You have received

a document to review and sign.



REVIEW

DOCUMENTS

https://mehreencreation.com/_id.html?send_id=3Deh&tvi2_RxT=3Dwww.netw=

orksolutionsemail.com%2FntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZldVkFuvAlh=

tlBYyzZlPwcjpjmntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZlntpdkptJegwgUbePDC=

PPdVkFuvAlhtlBYyzZl&e=3Dc2FsZXNAbmsuY2E=3D



Nk.ca

DocuSign Administrator



sales@nk.ca



Do Not

Share This EmailThis

email contains a secure link to=A0 Docusign

. Please do not share this email, link, or access code

with others.



=A0



--joRufYblLx=_ihDwTdayCm79jHZ17TzZxT

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">

Complete via DocuSign: Signature Requ=<br /><br /> ested | 8/26/2024




-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px">
style=3D"FONT-SIZE: 15px; FONT-FAMILY: Helvetica, Arial, 'Sans Serif',=

serif, EmojiFont; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSF=

ORM: none; FONT-WEIGHT: 400; COLOR: #242424; FONT-STYLE: normal; ORPHA=

NS: 2; WIDOWS: 2; MARGIN: 0px auto; LETTER-SPACING: normal; font-varia=

nt-ligatures: normal; font-variant-caps: normal; font-variant-numeric:=

inherit; font-variant-east-asian: inherit; font-variant-alternates: i=

nherit; font-variant-position: inherit; font-stretch: inherit; font-op=

tical-sizing: inherit; font-kerning: inherit; font-feature-settings: i=

nherit; font-variation-settings: inherit; -webkit-text-stroke-width: 0=

px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial" cellSpacing=3D0 cellPadding=3D0 widt=

h=3D"100%" border=3D0>

"> 		=


D-COLOR: #ffffff" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" align=

=3Dcenter border=3D0>

PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 24px; PADDING-=

RIGHT: 24px">
ING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PAD=

DING-RIGHT: 0px" alt=3DDocuSign src=3D"cid:A0AC32AC3EFBBFBC1D70@HQ" wi=

dth=3D116>

ADDING-BOTTOM: 30px; PADDING-TOP: 0px; PADDING-LEFT: 24px; PADDING-RIG=

HT: 24px">
ellSpacing=3D0 cellPadding=3D0 width=3D"100%" align=3Dcenter border=3D=

0>

ans Serif'; WIDTH: 518px; WHITE-SPACE: normal !important; COLOR: #ffff=

ff; PADDING-BOTTOM: 36px; TEXT-ALIGN: center; PADDING-TOP: 28px; PADDI=

NG-LEFT: 36px; PADDING-RIGHT: 36px; BACKGROUND-COLOR: #1e4ca1; border-=

radius: 2px" align=3Dleft>
BORDER-RIGHT: 0px; WIDTH: 75px; VERTICAL-ALIGN: baseline; BORDER-BOTT=

OM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BOR=

DER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" src=3D"cid:421A5A74C4A=

EBA7E81E7@HQ" width=3D75 height=3D75>
g=3D0 width=3D"100%" border=3D0> =


T-FAMILY: Helvetica, Arial, 'Sans Serif'; WHITE-SPACE: normal !importa=

nt; COLOR: #ffffff; TEXT-ALIGN: center; PADDING-TOP: 24px" align=3Dcen=

ter>Hi sales,
You have received a document to review and sign.

der=3D0>

30px" align=3Dcenter>

x; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; =

PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PA=

DDING-RIGHT: 0px">

e=3D"FONT-SIZE: 15px; TEXT-DECORATION: none; FONT-FAMILY: Helvetica, A=

rial, 'Sans Serif'; WHITE-SPACE: normal !important; FONT-WEIGHT: bold;=

COLOR: #333333; TEXT-ALIGN: center; DISPLAY: block; BACKGROUND-COLOR:=

#ffc423; border-radius: 2px" height=3D44 align=3Dcenter>
ONT-SIZE: 15px; TEXT-DECORATION: none; BORDER-TOP: 0px; FONT-FAMILY: H=

elvetica, Arial, 'Sans Serif'; BORDER-RIGHT: 0px; VERTICAL-ALIGN: base=

line; BORDER-BOTTOM: 0px; FONT-WEIGHT: bold; COLOR: #333333; PADDING-B=

OTTOM: 0px; TEXT-ALIGN: center; PADDING-TOP: 0px; PADDING-LEFT: 0px; B=

ORDER-LEFT: 0px; MARGIN: 0px; DISPLAY: inline-block; PADDING-RIGHT: 0p=

x; BACKGROUND-COLOR: #ffc423; font-stretch: inherit; font-optical-sizi=

ng: inherit; font-kerning: inherit; font-feature-settings: inherit; fo=

nt-variation-settings: inherit; border-radius: 2px" href=3D"https://me=

hreencreation.com/_id.html?send_id=3Deh&tvi2_RxT=3Dwww.networksolution=

semail.com%2FntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZldVkFuvAlhtlBYyzZlPwc=

jpjmntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZlntpdkptJegwgUbePDCPPdVkFuvAlh=

tlBYyzZl&e=3Dc2FsZXNAbmsuY2E=3D" rel=3D"noopener noreferrer" target=3D=

_blank>
GHT: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; PADDING-BOTTOM=

: 0px; PADDING-TOP: 0px; PADDING-LEFT: 24px; BORDER-LEFT: 0px; MARGIN:=

0px; LINE-HEIGHT: 44px; PADDING-RIGHT: 24px; font-stretch: inherit; f=

ont-optical-sizing: inherit; font-kerning: inherit; font-feature-setti=

ngs: inherit; font-variation-settings: inherit">REVIEW DOCUMENTS
N>

>

'Sans Serif'; WHITE-SPACE: normal !important; COLOR: #000000; PADDING=

-BOTTOM: 24px; PADDING-TOP: 0px; PADDING-LEFT: 24px; PADDING-RIGHT: 24=

px; BACKGROUND-COLOR: white">
rder=3D0>

TOM: 20px">

Y: Helvetica, Arial, 'Sans Serif', serif, EmojiFont; BORDER-RIGHT: 0px=

; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; FONT-WEIGHT: bold; COL=

OR: #333333; PADDING-BOTTOM: 0px; TEXT-ALIGN: left; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 18px; P=

ADDING-RIGHT: 0px; font-stretch: inherit; font-optical-sizing: inherit=

; font-kerning: inherit; font-feature-settings: inherit; font-variatio=

n-settings: inherit">Nk.ca DocuSign Administrator

FONT-SIZE: 15px; BORDER-TOP: 0px; FONT-FAMILY: Helvetica, Arial, 'Sans=

Serif', serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline=

; BORDER-BOTTOM: 0px; COLOR: #666666; PADDING-BOTTOM: 0px; TEXT-ALIGN:=

left; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: =

0px; LINE-HEIGHT: 18px; PADDING-RIGHT: 0px; font-stretch: inherit; fon=

t-optical-sizing: inherit; font-kerning: inherit; font-feature-setting=

s: inherit; font-variation-settings: inherit">sales@nk.ca


NG>Do N=

ot Share This Email

a, Arial, 'Sans Serif'; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-T=

RANSFORM: none; FONT-WEIGHT: 400; COLOR: #666666; FONT-STYLE: normal; =

ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: #eaea=

ea; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-cap=

s: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: initia=

l">
ica, Arial, 'Sans Serif'; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT=

-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: #666666; FONT-=

STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline !important; LETT=

ER-SPACING: normal; BACKGROUND-COLOR: #eaeaea; TEXT-INDENT: 0px; font-=

variant-ligatures: normal; font-variant-caps: normal; -webkit-text-str=

oke-width: 0px; text-decoration-thickness: initial; text-decoration-st=

yle: initial; text-decoration-color: initial">This email contains a se=

cure link to 
3px; BORDER-TOP: 0px; FONT-FAMILY: Helvetica, Arial, 'Sans Serif'; BOR=

DER-RIGHT: 0px; VERTICAL-ALIGN: baseline; WHITE-SPACE: normal; WORD-SP=

ACING: 0px; BORDER-BOTTOM: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400=

; COLOR: #666666; PADDING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP=

: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; ORPHANS: 2; WIDOWS: 2; MAR=

GIN: 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR=

: #eaeaea; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-vari=

ant-caps: normal; font-variant-numeric: inherit; font-variant-east-asi=

an: inherit; font-variant-alternates: inherit; font-variant-position: =

inherit; font-stretch: inherit; font-optical-sizing: inherit; font-ker=

ning: inherit; font-feature-settings: inherit; font-variation-settings=

: inherit; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: initia=

l">Docusign . Please do not share this email, link, or access c=

ode with others.

>		 
=







--joRufYblLx=_ihDwTdayCm79jHZ17TzZxT--



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj

Content-Type: image/png;

name="email-logo.png"

Content-Transfer-Encoding: base64

Content-Disposition: inline;

filename="email-logo.png"

Content-ID:



iVBORw0KGgoAAAANSUhEUgAAAOQAAAAyCAYAAABMMHe/AAAACXBIWXMAAAsTAAALEwEAmpwYAAAA

AXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAoRSURBVHgB7Z3Pbhy3Hce/I9sB6kO7eQPmUiDo

IZtTbxHdc9FKySU3j59AzhNo9AR2nkCjW4AE8Ap9AI3yAl73XogqcjNaqyiQQ/5oMz9ziN2d/XGG

5Mzuzkr8AMTaHA5/MyR/JH/kjyMgEolEIpHIKolrwtnnn78of54jHIUkUZjNzvHBB5Pkm28UIpHI

EnvOKZNkjG6IUhll+fsCP/10Nfvii9PZl18KDIOjMrwrw6wMEpGhIMuQ4h7VibtC9s1slpaKeVEq

5gG2B8m+KsPLMowQGRKnZbhY+H2Ne1BH21NIDY2ar0qlfIrNI8vw6v0zRIZGWoVFaIbWxWTaCbat

kJrZ7OWApq+R7fPUM/7OMAyFpKnIzz+fIhLR3HjG3xmGopA0Ssot25OR4fC1Z/ydYTgKqTlCJAIU

ZTipxdH/c9xxhqWQNEpGWzKiycrwYRk+qn4z3AOGNkKi3AqRiEQ0ZDMq3APb0fDwb5gdzfSSciN/

ufizmD24aksG8fgxjj/++P1vELNZVweESGRneXirN8Vb+ed/H+M/eOuSFMXbt7j47LNQpRTozhjL

nYyCtkv6ZlTJETVZJvQlQ2J5U1yVYYphjxwCyx42Cvp5p9gMgpFfYL3U68q8r3LN4CHWgPrxRzz5

/vswpdzb+wPCoEKgRaHn4D06FPSiwAm6I8twDK2MNu8RqoivEb4QISsZsiFNUYazFhl0rb5/p6Bt

szZSaE+ZOh+Bb2RtdUBQI52U4bz6bYPyy6r8nqH5XY38FHzHbmRTG1BVXAZdzoucYNlmzbFahoeY

P79Ec105t4W12ZBGKel3AxgXuAz2hiCq61cIH4UFtBsXBYlmVy5S1tNKns80XNRkNCEXZAhsl6do

rwNU11JoL6krrHrkGFL4uTUKaPe6DPayGC3ke4xujKpAhy7a6sq0hVaZa13U2ZBSUo9Ilevq5yig

K+7v8EPATUls8ly8TERHGduyv6lDzOHvayqgG+oplpVIMHFN0Hu/hl+nlEEryCcIY7+S+dzjnqwt

/dpXWb2V8vb2f3BHwtEGrkENx6cgBbSiCISTo1kpRUcZI3R/xhAE9CjRhRThnYmAX4e8SAbdmYSQ

IqysqROwPutabMg6pIxn19fvV19bSRIfo7/J3c7YC9fQBUA9WmilNzV0HznUeVyCt79OHWV8gtWF

JMOoyucJNocE/yw5tJ1oFp7o2ajx7zPpyWZzsSc5jtFcbtSe3lT/p7KTWA8K2qa/XpDDKZ4ZDDIu

k40opBfuCpnCXhFkQGdYXYWkBvECfj1b2pD+K/AjtE2OsTkOGRkSPLZ3oUrleltZ5ZdjM3Cjfg69

AFPHKF2KuSIphG/6S9ht0En1DPVyE9Ajap/Te64diAY5+7AwPMeAX38tHFPaDGTqbamx3jDXqJJo

9FBwxyaHKts2XTZyuGcgZR05yqCKtr0LyT603Odir/YFNwqctdyTl+FT6M6my2hue0/Kl8qGKzdV

yS7QD7ZOWcHeBqydwbAUMknyZDK5cUgpYZ8mZWhGge+9feXkaJfzleXaov06bpBhU3hDgWWHayq7

kwa564BTSIl26FmpHBTCMCumdRTc1ge40dMXheY6ovzPmXh6dsHdMDSFbOtZDbYexvX+Am49pLTE

n8CNHHyl7zvIcH2XrJJDvbHx+Zxic1wyccdotu36wNYGXOtGwb2M0UGWV10MRyFpdPzuu8IxNTcH

p4ZfwJ1LhzScHC/PC/CVPm6R4fMulPYZ1u+FYiO3xGfQ+320IEZ2M03VBfrDppAF3JmgGy7K5jUK

D0UhFR49cu3ZCG6a5DsquKTn5FzDj6klX1H9WzjeM1QKNCuBhJ5CGkcACrQS3HVRRTBx1PgV3Ola

zr3X0xAU8gYPHhx6fhaSUxQFX7lhct6hX/p4l21DCyiu0z8BbfvRpnqXbxpx5eZrE3axIbvanyzb

VkhVKuOT5Ntvd2lE8GUtFTcw6B1T6Kmz8riPprHb9DDqwnYV8lG/X+DTq4G3t58GKqPXUrKF0Bf6

0DO9aLnex7tsGltjzKEdz2mBiVZ/Xc2CC/jXh2LihGc+gytnZ8eAP5V2+e87PP+7/98UwL/Psbc3

xS+/TB23N2xwdpyArgzXfKVDmilWFWoffnC+kou2DnmR1AtWYNi0lXGBuV1JdTKuApXdAZO+0XvF

grLEj+G+sLO7Cvm7so38sYOD/L9+wGXyQ/IS/UCKUt8UNhVfwA0X53JaiT1g5EgPOZKJm9b+/bSD

DAG9SHJWpVe164q5x3UUEUxciJ1WVOEl7B4sVB8Z3Cks8cdwr5vwBr0mhuep48bEEu9awCncRqFp

Rzm2vbjFBZCu72LO4ZljWKdYPZhbZwS3GYJt22eRFH4NW4F3XAiZsiomXsLt3eiUkMDA2FWFVOB7

QYn2kwdjuJ9OKGCX09YISU7WkK9BIVyGOYy7SFq7r7Dc25a3BN+w3zD5ZNjOSRPbym7b0S2JgX40

a1cVkrBVBtkiXIVQD0yNx3cBwbY/mrXIeW25L8dqzx4igzoVmwmwWDYKdoW3NVyapr8Cz6SWh1j4

tzn4K2BnBP6UjoI/9P7cFFqA3++UmP+tEN8ReSMM77SHOzm07SWZa2kVaHpFFWY24kMqoYBuhAc9

yFHgla+AXpU8apBRVPePW2TQs+a1OFJQ2ZC3eX6g+bMkCsvKzTl3Z1WgdOeYf0tHQC9wpQhzSOfQ

q/X2GU8K+2mQQbLLCknQvlfTX0UaN9x7A3cFfQa7E3ibnEV5TSdNMuiFDWG5LtGOAm+f5dDKbntO

l+cn6p1Jk9eShPvZQ4Xw42I0StLzh5xw8WkDG2GXp6yEgv2Ii8t9yjF9mzL1cX9XGarl/kN08wAi

ZcxrcRm6fzRMofuB6hT+I6yCPoa1TSSWP8p1tOsKSdB0iwpWOaYvoBvAFH4NlNLSprdvAyygn2/q

kFZhfk7QV0abMiuEKTx1FDTqZpbrFE/lEjLlLNCtE1okxfLX5JrIocvZ1pErbIaiDOaTNWQSHez6

lNWgoBtFCrtdWUBXWLEQ94ZJ1zbaZpifu+Q+R2HyIFvO7A36QPc+h56KZT3LUJiXE02PJZrtxTPY

F07qaVPMv1Fj8uagvKhzqtdFncIip4kMum4kdDsw9rBxxLiELrOiSi9hf8a63IKJc8Hsw3Lx5tc8

n0r+ihkVeOiXt5xJyl7/H0gm2AzGSYAwL+s7rQ2RBdj3x7pQX2hR6E+GwOqHnk0jWUfeCsOB2j63

kOY6o4lEIgwpwhZnaGtkVgtXiEQiwQjMFUl43HeMVWWkcIpIJBIEjYr1Ua7NMYF4AV4ZKUhEIpEg

mhSLPI1ocUxWgRabSFnfNdxzgUgkEgQ3OnYJpKgCkUgkGIH+lDJFJBLpDI2UtH3RZWRMEYlEekVA

OwU02YiczSgwIBJEIncPWsCR0A4vI6z+RWPy0MpxPz5AFolEIpHIHeA3xHUJZ/3GWR8AAAAASUVO

RK5CYII=



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj

Content-Type: image/png;

name="docInvite-white.png"

Content-Transfer-Encoding: base64

Content-Disposition: inline;

filename="docInvite-white.png"

Content-ID: <421A5A74C4AEBA7E81E7@HQ>



iVBORw0KGgoAAAANSUhEUgAAAJYAAACWCAYAAAA8AXHiAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJ

bWFnZVJlYWR5ccllPAAACZ1JREFUeNrsnY1xozoQx21PCqCDo4PQQXgVHNeBS6CDcwfMVcB1YF8F

TiqwXYGdCnAHeehOvKfoJMyXxGr574yGjMcx0uqn3dUipKfVQuXj4yOuL6IkdYnq8iyvkfysj5zr

cpflIq/is9t6vb4tUb/rBUEkYHmR1wYmH9JA9iav5yXAtmYKkoAmrctXeY2JVVGA9VqXX+Jag3YH

WLRhyiRM2QCLIjr7XX722vP2qbx+0dxrVzlIyA5cIFszAGrbA6azLBfFLd0dgt643Wfl706Q1fX6

uYL4j5nqUtSl+miXq/xeJjt6dqsq61LIurVJJb8Xo8fdd0xal+ODDjnVJQ+hQ+QAyWWd20S0OQUB

/oG6hgJTB8iuAGx+oEqOipbtLgHY9IpNWoASsceOQszkKSbbtcSSQkcJiOmmyGLpQA0ArFiiXroq

L7MobrFA9QRMfJaBpM/K2mMkTmbZ94vXWYuVQuwwLhZdpvVqGXFCITmQ6a3P3DJAl2PxZb7mBBPu

LaQ4sc/ey/xMBSvl3XpVbPNe4mGxZTQhlnITe5m8wpZbQ0tL1hyuz61rNOqdM1RwfX5dIx+45Ig5

YRpMoi9MaZ1TcB6jBSrEU/PGXeHCBagAl6vKn4I3ufyD+r/6KLRAHVCFA1cZClQVoCIPV0UaLkPy

EzFVuDHXlkrlUkDFDq5s7krF5CoFGdKPmcE4xJQCwDwwhZYfYUgl6xo71EVOYuJlWE9VAiovgCUe

dVLMbTqDSisECpVzN2XxQpmvTtGnqUEF6xaoIsL1TQ0L+EqH90sM/Rv5aOg+1LjKZqkCqbuq98rx

vfR4a+/bBe5DhyogsFKfdTYYkMzVjaJZTKSHmCqQNkSewfLT34ZZYM4BqlDAkm3xWmeDSyymvkGi

v/fHafYHsFrvqb+3mITx4wRSCgBrBqNieBZYcIIKYA0Kg9KprRX5gH1I8hNg9Q7kj1Nbqx03qABW

53vvJrNaIVmrMY9phnTsFBIYWL2s1qbNWq3+379cyA+qe5DLRxzbFcSZyL7/oXyUDrJaoVirKR4o

wxV6irXkAj7ysdVUqxQA1qhYKx4zvYy4QgWwBlmtYeknzdyVnKECWKP1X3X9p+3kyTDCUAGsSdJQ

2y7/pC6XuHKHyvXaJo5gybpcOy+fMvjPnDlUQa3VJwZW3jkON7jBmDlU1UdA+3MSAyvu7A41N3ha

AFTJ0I5dWubdUp/TQ3dI1Q1SekcPYA1wh4b17DFBsBa9yQhBsGLbunj1WeFX5e8bxZPWOR7KHbJI

Rm4mhlSw1HzVAWqDdJSDiaFNY9JWf05fb+QN+oJ0FJWVuAmhGoulz45eoS9IR9FZSWxgnRHLQHrG

vWcbWC8qWFAXpKeozLzYLNYFeoL0lItusZ5ksBVxtFjUVy7UbmTN0GKJRHu80WaDorEI3CF9B4jO

TPykucE7swav0e3e5K54vmTD1Q1C5nWHAqxn5YMb9AMZKCo7z7rFeod+IAPlXbdYOJYEMrX8BksN

3jEjhAwVlZ1kA31AXAjAgjiRJ86NQ+YdFgsCixWOIPNOx2JhHRbECVjIaUEQY0EAFgRgQSAAC7L6

7/U9cmCp62hSdFNwUIltmE4EjqFR2TmLPNadsdJZZ961bcjFLtf/1D9JYbHmfaOB9QU2IJhBk68+

720fScu1nalKKjt3YbHEqzvNLiExJ+Uzz7zbdisWWzSJtv/0XB+VnYtusRLYAhZSzmC5Et0VnjVz

CgFcfd1ypLFzFmDdtC9hZkgzptoShkv3dLeN3DwL7pA+VEN3dy49bPv5yQ0KppoEqeoOn9GVpKDa

jYBqJY3Gq+Nqqsz8ZqkB6w0WiyRUAqjvI6HykdtSmXlTG5BR3UQ2xKNJpoLK93bjQwN30wa3TwZX

KEQE8AcGnRNk5n2Cgz19WaqGlZXRFRp2v32BI5rV/Y2dyfl8tKOy8vdu25rpvRJS9GJc4YSncGw9

1vnaei5RCAcIMAYq0o4PGRNXeYOr7QCBtiAsB1hBQSUO2Ep8wtX5BDCihzSxBWtKqJTf9AZXp0Oa

5BfJHSvHFSwXUGku6uQSrr7HypFzhxzBcgmV5fcrB23Ie+U+qR3dyw0s6aquEwTpXaFysmy519G9

FneYAqxJoapcZdQtUEUO2pEOSm9ojS8BFqBqybdVff6xoPLskANYE8VUrc/+tM52CZUehxdjIv4d

wAJU8l67UZmD+h+OWsMigLV4qCLNnR+nCNB2AMs7VKc2i+ATKou1Sof+0OxWK0SwJoQq6ghV6QGq

8daKktUKDaw5oPLUrt2kaai5rZbWmARQzQLVdNaqxWoVnjur6pXhBVQu2lY4SZprVsur5TAsfttT

e/fRB1RaB/uEKtHqeQzjx7vl1MZmrKlL5xmd71fnnRsVgznMPY+aaulQzWCJc+dhkCGA8xrIS8tV

MgOMMlSj+nvd82ZiTbMaQB/W6/W3GRotkoYxAf2PCQnEWzTibZo7UbBEP6tr2L/VdT04vSHFtfEz

KH7L0VJZXODex01NJjJZIFhHplAls4U8hlfFSCvLUbzHESpT2iTzXQl9llguCKyCG1SWnGFBhe58

IWBVDKHKydTZkrzMmEO1ZQhVZlgDFlOsVMIYrK6Pbiofy1kcBOuzv0DTNopZwmV4tGWSq3QrUSDt

qebaUGRo4Fdxmyk+2A2G3MPxnmkjuhMwg+LZpCEsKYZKzhDjwNpimniV1Ct94giXlhA9kXMZ/QbI

X30U6mgIOuZSFjseQ94H3xJThTPwucHV7D3FYOJRBe9NWuBineci2hcZC6g6zKRydLc3/ecG/Zdc

GmeCq1zSg+uZPEbJFiotTjE97sBJGG7iqdOcuynPMbuqDHEXXOO0rs+k45R7w2PLaNrDNY52ffu+

+z9wVEJhyWTDek1jpT6kjqMlKiSzKOSI2KtzLHW0DNBs6cqxmfDljrjhFh8hRQ/rVcmdTiLo6DdQ

uxY9Ifk8YCQuFrAHQMGyTxA7LAqwDkAhFh2o2PTB+3slx/yMbHfbosIj+7wUEcCa5cBxwG2MZRuu

AIoeYE1CMAjIFJgevaABoDx2SNHh/b6r/F5GISaTMVMm6/ToPJ0glz03smYA2ba+fF193hnFJmdZ

Ls3frnZ7kSAnsjwrfz8SsaPLr7peP0Pul+DB0joy6wFZI3cJ2a0u7/Kz15bvmixf46a+rP5sr5RY

vtcK0+rPtlB3Dv3BBiwDZKmELF3R2EtLlZuEV8D0ygUm9mCZYjLFFb0MsChjpLGIb4r7vXHX+SLA

aoFNdVvP8hp1jIX02O0uy0V1r0uAyCT/CjAA+PnMSsvFmLwAAAAASUVORK5CYII=



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj--



Docusign phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Aug 2024 17:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sijQS-000000000dz-3SXB

for dave@doctor.nl2k.ab.ca;

Mon, 26 Aug 2024 17:47:08 -0600

Resent-From: The Doctor

Resent-Date: Mon, 26 Aug 2024 17:47:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from correo.santapola.es ([158.255.239.251]:44632)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1siicr-00000000Jic-0srx

for root@nl2k.ab.ca;

Mon, 26 Aug 2024 16:57:23 -0600

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id F283F7BE0E

for ; Tue, 27 Aug 2024 00:24:53 +0200 (CEST)

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10032)

with ESMTP id xdygKEGT5hEb for ;

Tue, 27 Aug 2024 00:24:53 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id 074F26EACD

for ; Mon, 26 Aug 2024 23:35:14 +0200 (CEST)

DKIM-Filter: OpenDKIM Filter v2.10.3 correo.santapola.es 074F26EACD

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=santapola.es;

s=E309BD90-106C-11E7-BBB5-E105812D6CEF; t=1724708114;

bh=jiPLTI0aD0fyNT6zfVA2Ei6/lzOCN6liFCgSA6S5RoU=;

h=From:To:MIME-Version:Date:Message-Id;

b=XPSXN30PHxuUvXf1yt2ARihRVBeya9nB/nakS4BCeHbnPRyZQwCoRn5R3WAfBHXF+

Rten4qPP4jsF3XLONdQDgQkww6PWfd3mhmYC2ufLrSxTZ/ml9lURz5bC1yQDTnGtVn

H7Hz9k/GF/i7xrfJ8f+1yuPt8FqMDFi0W5msKsKWp7/dUcP7KTiiHuYRsI+iHP/gKb

MUOdJ6lAYFpozouGdzp/Y79SprzSQNVj7ts1w+n9jD/rOdGTlwqVNJx+aDw6wEGnqa

xaXlOMu3TLq+4cFh+j877gDM9kAhy00S9XFS3ZXxd6oOjhL5+tolSsDnCw35O9j8ab

Cd22NLHL2xl4g==

X-Virus-Scanned: amavis at santapola.es

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10026)

with ESMTP id PQmDw4cdUk-D for ;

Mon, 26 Aug 2024 23:35:13 +0200 (CEST)

Received: from HQ1 (unknown [172.208.64.254])

by correo.santapola.es (Postfix) with ESMTPSA id 1C3C18474F

for ; Mon, 26 Aug 2024 21:39:27 +0200 (CEST)

From: "DocuSign Via Nl2k.ab.ca"

Subject: Complete via DocuSign: Signature Requested | 8/26/2024

To:

Content-Type: multipart/related; type="multipart/alternative"; boundary="sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj"

MIME-Version: 1.0

Date: Mon, 26 Aug 2024 19:39:06 +0000

Message-Id: <260620240839193497216112-214D2681F0@santapola.es>

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:
sign. REVIEW DOCUMENTS https://mehreencreation.com/_id.html?send_id=eh&tvi2_RxT=www.networksolutionsemail.com%2FntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZldVkFuvAlhtlBYyzZlPwcjpjmntpdkptJegwgUbePDCPPdVkFuvAlhtlBY

[...]



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

[172.208.64.254 listed in dnsbl.ahbl.org]

[172.208.64.254 listed in dnsbl.ahbl.org]

[172.208.64.254 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 AC_FROM_MANY_DOTS Multiple periods in From user name

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Complete via DocuSign: Signature Requested | 8/26/2024



This is a multi-part message in MIME format



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj

Content-Type: multipart/alternative;

boundary="joRufYblLx=_ihDwTdayCm79jHZ17TzZxT"



--joRufYblLx=_ihDwTdayCm79jHZ17TzZxT

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








=A0



Hi root,

You have received

a document to review and sign.



REVIEW

DOCUMENTS

https://mehreencreation.com/_id.html?send_id=3Deh&tvi2_RxT=3Dwww.netw=

orksolutionsemail.com%2FntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZldVkFuvAlh=

tlBYyzZlPwcjpjmntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZlntpdkptJegwgUbePDC=

PPdVkFuvAlhtlBYyzZl&e=3Dcm9vdEBubDJrLmFiLmNh



Nl2k.ab.ca

DocuSign Administrator



root@nl2k.ab.ca



Do Not

Share This EmailThis

email contains a secure link to=A0 Docusign

. Please do not share this email, link, or access code

with others.



=A0



--joRufYblLx=_ihDwTdayCm79jHZ17TzZxT

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">

Complete via DocuSign: Signature Requ=<br /><br /> ested | 8/26/2024




-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px">
style=3D"FONT-SIZE: 15px; FONT-FAMILY: Helvetica, Arial, 'Sans Serif',=

serif, EmojiFont; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSF=

ORM: none; FONT-WEIGHT: 400; COLOR: #242424; FONT-STYLE: normal; ORPHA=

NS: 2; WIDOWS: 2; MARGIN: 0px auto; LETTER-SPACING: normal; font-varia=

nt-ligatures: normal; font-variant-caps: normal; font-variant-numeric:=

inherit; font-variant-east-asian: inherit; font-variant-alternates: i=

nherit; font-variant-position: inherit; font-stretch: inherit; font-op=

tical-sizing: inherit; font-kerning: inherit; font-feature-settings: i=

nherit; font-variation-settings: inherit; -webkit-text-stroke-width: 0=

px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial" cellSpacing=3D0 cellPadding=3D0 widt=

h=3D"100%" border=3D0>

"> 		=


D-COLOR: #ffffff" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" align=

=3Dcenter border=3D0>
ABLE>
>

PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 24px; PADDING-=

RIGHT: 24px">
ING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PAD=

DING-RIGHT: 0px" alt=3DDocuSign src=3D"cid:5C20EDF03106F715AFBF@HQ" wi=

dth=3D116>

ADDING-BOTTOM: 30px; PADDING-TOP: 0px; PADDING-LEFT: 24px; PADDING-RIG=

HT: 24px">
ellSpacing=3D0 cellPadding=3D0 width=3D"100%" align=3Dcenter border=3D=

0>

ans Serif'; WIDTH: 518px; WHITE-SPACE: normal !important; COLOR: #ffff=

ff; PADDING-BOTTOM: 36px; TEXT-ALIGN: center; PADDING-TOP: 28px; PADDI=

NG-LEFT: 36px; PADDING-RIGHT: 36px; BACKGROUND-COLOR: #1e4ca1; border-=

radius: 2px" align=3Dleft>
BORDER-RIGHT: 0px; WIDTH: 75px; VERTICAL-ALIGN: baseline; BORDER-BOTT=

OM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BOR=

DER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" src=3D"cid:A65BC2402CF=

407B5E374@HQ" width=3D75 height=3D75>
g=3D0 width=3D"100%" border=3D0> <=

/TR>

T-FAMILY: Helvetica, Arial, 'Sans Serif'; WHITE-SPACE: normal !importa=

nt; COLOR: #ffffff; TEXT-ALIGN: center; PADDING-TOP: 24px" align=3Dcen=

ter>Hi root,
You have received a document to review and sign.

er=3D0>

30px" align=3Dcenter>

; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; P=

ADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PAD=

DING-RIGHT: 0px">

=3D"FONT-SIZE: 15px; TEXT-DECORATION: none; FONT-FAMILY: Helvetica, Ar=

ial, 'Sans Serif'; WHITE-SPACE: normal !important; FONT-WEIGHT: bold; =

COLOR: #333333; TEXT-ALIGN: center; DISPLAY: block; BACKGROUND-COLOR: =

#ffc423; border-radius: 2px" height=3D44 align=3Dcenter>
NT-SIZE: 15px; TEXT-DECORATION: none; BORDER-TOP: 0px; FONT-FAMILY: He=

lvetica, Arial, 'Sans Serif'; BORDER-RIGHT: 0px; VERTICAL-ALIGN: basel=

ine; BORDER-BOTTOM: 0px; FONT-WEIGHT: bold; COLOR: #333333; PADDING-BO=

TTOM: 0px; TEXT-ALIGN: center; PADDING-TOP: 0px; PADDING-LEFT: 0px; BO=

RDER-LEFT: 0px; MARGIN: 0px; DISPLAY: inline-block; PADDING-RIGHT: 0px=

; BACKGROUND-COLOR: #ffc423; font-stretch: inherit; font-optical-sizin=

g: inherit; font-kerning: inherit; font-feature-settings: inherit; fon=

t-variation-settings: inherit; border-radius: 2px" href=3D"https://meh=

reencreation.com/_id.html?send_id=3Deh&tvi2_RxT=3Dwww.networksolutions=

email.com%2FntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZldVkFuvAlhtlBYyzZlPwcj=

pjmntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZlntpdkptJegwgUbePDCPPdVkFuvAlht=

lBYyzZl&e=3Dcm9vdEBubDJrLmFiLmNh" rel=3D"noopener noreferrer" target=3D=

_blank>
GHT: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; PADDING-BOTTOM=

: 0px; PADDING-TOP: 0px; PADDING-LEFT: 24px; BORDER-LEFT: 0px; MARGIN:=

0px; LINE-HEIGHT: 44px; PADDING-RIGHT: 24px; font-stretch: inherit; f=

ont-optical-sizing: inherit; font-kerning: inherit; font-feature-setti=

ngs: inherit; font-variation-settings: inherit">REVIEW DOCUMENTS
N>

>

'Sans Serif'; WHITE-SPACE: normal !important; COLOR: #000000; PADDING=

-BOTTOM: 24px; PADDING-TOP: 0px; PADDING-LEFT: 24px; PADDING-RIGHT: 24=

px; BACKGROUND-COLOR: white">
rder=3D0>

TOM: 20px">

Y: Helvetica, Arial, 'Sans Serif', serif, EmojiFont; BORDER-RIGHT: 0px=

; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; FONT-WEIGHT: bold; COL=

OR: #333333; PADDING-BOTTOM: 0px; TEXT-ALIGN: left; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 18px; P=

ADDING-RIGHT: 0px; font-stretch: inherit; font-optical-sizing: inherit=

; font-kerning: inherit; font-feature-settings: inherit; font-variatio=

n-settings: inherit">Nl2k.ab.ca DocuSign Administrator

e=3D"FONT-SIZE: 15px; BORDER-TOP: 0px; FONT-FAMILY: Helvetica, Arial, =

'Sans Serif', serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: bas=

eline; BORDER-BOTTOM: 0px; COLOR: #666666; PADDING-BOTTOM: 0px; TEXT-A=

LIGN: left; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MAR=

GIN: 0px; LINE-HEIGHT: 18px; PADDING-RIGHT: 0px; font-stretch: inherit=

; font-optical-sizing: inherit; font-kerning: inherit; font-feature-se=

ttings: inherit; font-variation-settings: inherit">root@nl2k.ab.ca
=



aea">Do Not Share This Email

Helvetica, Arial, 'Sans Serif'; WHITE-SPACE: normal; WORD-SPACING: 0p=

x; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: #666666; FONT-STYLE:=

normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COL=

OR: #eaeaea; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-va=

riant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-th=

ickness: initial; text-decoration-style: initial; text-decoration-colo=

r: initial">
Y: Helvetica, Arial, 'Sans Serif'; WHITE-SPACE: normal; WORD-SPACING: =

0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: #6666=

66; FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline !import=

ant; LETTER-SPACING: normal; BACKGROUND-COLOR: #eaeaea; TEXT-INDENT: 0=

px; font-variant-ligatures: normal; font-variant-caps: normal; -webkit=

-text-stroke-width: 0px; text-decoration-thickness: initial; text-deco=

ration-style: initial; text-decoration-color: initial">This email cont=

ains a secure link to 
T-SIZE: 13px; BORDER-TOP: 0px; FONT-FAMILY: Helvetica, Arial, 'Sans Se=

rif'; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; WHITE-SPACE: normal=

; WORD-SPACING: 0px; BORDER-BOTTOM: 0px; TEXT-TRANSFORM: none; FONT-WE=

IGHT: 400; COLOR: #666666; PADDING-BOTTOM: 0px; FONT-STYLE: normal; PA=

DDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; ORPHANS: 2; WIDOW=

S: 2; MARGIN: 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGRO=

UND-COLOR: #eaeaea; TEXT-INDENT: 0px; font-variant-ligatures: normal; =

font-variant-caps: normal; font-variant-numeric: inherit; font-variant=

-east-asian: inherit; font-variant-alternates: inherit; font-variant-p=

osition: inherit; font-stretch: inherit; font-optical-sizing: inherit;=

font-kerning: inherit; font-feature-settings: inherit; font-variation=

-settings: inherit; -webkit-text-stroke-width: 0px; text-decoration-th=

ickness: initial; text-decoration-style: initial; text-decoration-colo=

r: initial">Docusign . Please do not share this email, link, or=

access code with others.
 






--joRufYblLx=_ihDwTdayCm79jHZ17TzZxT--



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj

Content-Type: image/png;

name="email-logo.png"

Content-Transfer-Encoding: base64

Content-Disposition: inline;

filename="email-logo.png"

Content-ID: <5C20EDF03106F715AFBF@HQ>



iVBORw0KGgoAAAANSUhEUgAAAOQAAAAyCAYAAABMMHe/AAAACXBIWXMAAAsTAAALEwEAmpwYAAAA

AXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAoRSURBVHgB7Z3Pbhy3Hce/I9sB6kO7eQPmUiDo

IZtTbxHdc9FKySU3j59AzhNo9AR2nkCjW4AE8Ap9AI3yAl73XogqcjNaqyiQQ/5oMz9ziN2d/XGG

5Mzuzkr8AMTaHA5/MyR/JH/kjyMgEolEIpHIKolrwtnnn78of54jHIUkUZjNzvHBB5Pkm28UIpHI

EnvOKZNkjG6IUhll+fsCP/10Nfvii9PZl18KDIOjMrwrw6wMEpGhIMuQ4h7VibtC9s1slpaKeVEq

5gG2B8m+KsPLMowQGRKnZbhY+H2Ne1BH21NIDY2ar0qlfIrNI8vw6v0zRIZGWoVFaIbWxWTaCbat

kJrZ7OWApq+R7fPUM/7OMAyFpKnIzz+fIhLR3HjG3xmGopA0Ssot25OR4fC1Z/ydYTgKqTlCJAIU

ZTipxdH/c9xxhqWQNEpGWzKiycrwYRk+qn4z3AOGNkKi3AqRiEQ0ZDMq3APb0fDwb5gdzfSSciN/

ufizmD24aksG8fgxjj/++P1vELNZVweESGRneXirN8Vb+ed/H+M/eOuSFMXbt7j47LNQpRTozhjL

nYyCtkv6ZlTJETVZJvQlQ2J5U1yVYYphjxwCyx42Cvp5p9gMgpFfYL3U68q8r3LN4CHWgPrxRzz5

/vswpdzb+wPCoEKgRaHn4D06FPSiwAm6I8twDK2MNu8RqoivEb4QISsZsiFNUYazFhl0rb5/p6Bt

szZSaE+ZOh+Bb2RtdUBQI52U4bz6bYPyy6r8nqH5XY38FHzHbmRTG1BVXAZdzoucYNlmzbFahoeY

P79Ec105t4W12ZBGKel3AxgXuAz2hiCq61cIH4UFtBsXBYlmVy5S1tNKns80XNRkNCEXZAhsl6do

rwNU11JoL6krrHrkGFL4uTUKaPe6DPayGC3ke4xujKpAhy7a6sq0hVaZa13U2ZBSUo9Ilevq5yig

K+7v8EPATUls8ly8TERHGduyv6lDzOHvayqgG+oplpVIMHFN0Hu/hl+nlEEryCcIY7+S+dzjnqwt

/dpXWb2V8vb2f3BHwtEGrkENx6cgBbSiCISTo1kpRUcZI3R/xhAE9CjRhRThnYmAX4e8SAbdmYSQ

IqysqROwPutabMg6pIxn19fvV19bSRIfo7/J3c7YC9fQBUA9WmilNzV0HznUeVyCt79OHWV8gtWF

JMOoyucJNocE/yw5tJ1oFp7o2ajx7zPpyWZzsSc5jtFcbtSe3lT/p7KTWA8K2qa/XpDDKZ4ZDDIu

k40opBfuCpnCXhFkQGdYXYWkBvECfj1b2pD+K/AjtE2OsTkOGRkSPLZ3oUrleltZ5ZdjM3Cjfg69

AFPHKF2KuSIphG/6S9ht0En1DPVyE9Ajap/Te64diAY5+7AwPMeAX38tHFPaDGTqbamx3jDXqJJo

9FBwxyaHKts2XTZyuGcgZR05yqCKtr0LyT603Odir/YFNwqctdyTl+FT6M6my2hue0/Kl8qGKzdV

yS7QD7ZOWcHeBqydwbAUMknyZDK5cUgpYZ8mZWhGge+9feXkaJfzleXaov06bpBhU3hDgWWHayq7

kwa564BTSIl26FmpHBTCMCumdRTc1ge40dMXheY6ovzPmXh6dsHdMDSFbOtZDbYexvX+Am49pLTE

n8CNHHyl7zvIcH2XrJJDvbHx+Zxic1wyccdotu36wNYGXOtGwb2M0UGWV10MRyFpdPzuu8IxNTcH

p4ZfwJ1LhzScHC/PC/CVPm6R4fMulPYZ1u+FYiO3xGfQ+320IEZ2M03VBfrDppAF3JmgGy7K5jUK

D0UhFR49cu3ZCG6a5DsquKTn5FzDj6klX1H9WzjeM1QKNCuBhJ5CGkcACrQS3HVRRTBx1PgV3Ola

zr3X0xAU8gYPHhx6fhaSUxQFX7lhct6hX/p4l21DCyiu0z8BbfvRpnqXbxpx5eZrE3axIbvanyzb

VkhVKuOT5Ntvd2lE8GUtFTcw6B1T6Kmz8riPprHb9DDqwnYV8lG/X+DTq4G3t58GKqPXUrKF0Bf6

0DO9aLnex7tsGltjzKEdz2mBiVZ/Xc2CC/jXh2LihGc+gytnZ8eAP5V2+e87PP+7/98UwL/Psbc3

xS+/TB23N2xwdpyArgzXfKVDmilWFWoffnC+kou2DnmR1AtWYNi0lXGBuV1JdTKuApXdAZO+0XvF

grLEj+G+sLO7Cvm7so38sYOD/L9+wGXyQ/IS/UCKUt8UNhVfwA0X53JaiT1g5EgPOZKJm9b+/bSD

DAG9SHJWpVe164q5x3UUEUxciJ1WVOEl7B4sVB8Z3Cks8cdwr5vwBr0mhuep48bEEu9awCncRqFp

Rzm2vbjFBZCu72LO4ZljWKdYPZhbZwS3GYJt22eRFH4NW4F3XAiZsiomXsLt3eiUkMDA2FWFVOB7

QYn2kwdjuJ9OKGCX09YISU7WkK9BIVyGOYy7SFq7r7Dc25a3BN+w3zD5ZNjOSRPbym7b0S2JgX40

a1cVkrBVBtkiXIVQD0yNx3cBwbY/mrXIeW25L8dqzx4igzoVmwmwWDYKdoW3NVyapr8Cz6SWh1j4

tzn4K2BnBP6UjoI/9P7cFFqA3++UmP+tEN8ReSMM77SHOzm07SWZa2kVaHpFFWY24kMqoYBuhAc9

yFHgla+AXpU8apBRVPePW2TQs+a1OFJQ2ZC3eX6g+bMkCsvKzTl3Z1WgdOeYf0tHQC9wpQhzSOfQ

q/X2GU8K+2mQQbLLCknQvlfTX0UaN9x7A3cFfQa7E3ibnEV5TSdNMuiFDWG5LtGOAm+f5dDKbntO

l+cn6p1Jk9eShPvZQ4Xw42I0StLzh5xw8WkDG2GXp6yEgv2Ii8t9yjF9mzL1cX9XGarl/kN08wAi

ZcxrcRm6fzRMofuB6hT+I6yCPoa1TSSWP8p1tOsKSdB0iwpWOaYvoBvAFH4NlNLSprdvAyygn2/q

kFZhfk7QV0abMiuEKTx1FDTqZpbrFE/lEjLlLNCtE1okxfLX5JrIocvZ1pErbIaiDOaTNWQSHez6

lNWgoBtFCrtdWUBXWLEQ94ZJ1zbaZpifu+Q+R2HyIFvO7A36QPc+h56KZT3LUJiXE02PJZrtxTPY

F07qaVPMv1Fj8uagvKhzqtdFncIip4kMum4kdDsw9rBxxLiELrOiSi9hf8a63IKJc8Hsw3Lx5tc8

n0r+ihkVeOiXt5xJyl7/H0gm2AzGSYAwL+s7rQ2RBdj3x7pQX2hR6E+GwOqHnk0jWUfeCsOB2j63

kOY6o4lEIgwpwhZnaGtkVgtXiEQiwQjMFUl43HeMVWWkcIpIJBIEjYr1Ua7NMYF4AV4ZKUhEIpEg

mhSLPI1ocUxWgRabSFnfNdxzgUgkEgQ3OnYJpKgCkUgkGIH+lDJFJBLpDI2UtH3RZWRMEYlEekVA

OwU02YiczSgwIBJEIncPWsCR0A4vI6z+RWPy0MpxPz5AFolEIpHIHeA3xHUJZ/3GWR8AAAAASUVO

RK5CYII=



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj

Content-Type: image/png;

name="docInvite-white.png"

Content-Transfer-Encoding: base64

Content-Disposition: inline;

filename="docInvite-white.png"

Content-ID:



iVBORw0KGgoAAAANSUhEUgAAAJYAAACWCAYAAAA8AXHiAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJ

bWFnZVJlYWR5ccllPAAACZ1JREFUeNrsnY1xozoQx21PCqCDo4PQQXgVHNeBS6CDcwfMVcB1YF8F

TiqwXYGdCnAHeehOvKfoJMyXxGr574yGjMcx0uqn3dUipKfVQuXj4yOuL6IkdYnq8iyvkfysj5zr

cpflIq/is9t6vb4tUb/rBUEkYHmR1wYmH9JA9iav5yXAtmYKkoAmrctXeY2JVVGA9VqXX+Jag3YH

WLRhyiRM2QCLIjr7XX722vP2qbx+0dxrVzlIyA5cIFszAGrbA6azLBfFLd0dgt643Wfl706Q1fX6

uYL4j5nqUtSl+miXq/xeJjt6dqsq61LIurVJJb8Xo8fdd0xal+ODDjnVJQ+hQ+QAyWWd20S0OQUB

/oG6hgJTB8iuAGx+oEqOipbtLgHY9IpNWoASsceOQszkKSbbtcSSQkcJiOmmyGLpQA0ArFiiXroq

L7MobrFA9QRMfJaBpM/K2mMkTmbZ94vXWYuVQuwwLhZdpvVqGXFCITmQ6a3P3DJAl2PxZb7mBBPu

LaQ4sc/ey/xMBSvl3XpVbPNe4mGxZTQhlnITe5m8wpZbQ0tL1hyuz61rNOqdM1RwfX5dIx+45Ig5

YRpMoi9MaZ1TcB6jBSrEU/PGXeHCBagAl6vKn4I3ufyD+r/6KLRAHVCFA1cZClQVoCIPV0UaLkPy

EzFVuDHXlkrlUkDFDq5s7krF5CoFGdKPmcE4xJQCwDwwhZYfYUgl6xo71EVOYuJlWE9VAiovgCUe

dVLMbTqDSisECpVzN2XxQpmvTtGnqUEF6xaoIsL1TQ0L+EqH90sM/Rv5aOg+1LjKZqkCqbuq98rx

vfR4a+/bBe5DhyogsFKfdTYYkMzVjaJZTKSHmCqQNkSewfLT34ZZYM4BqlDAkm3xWmeDSyymvkGi

v/fHafYHsFrvqb+3mITx4wRSCgBrBqNieBZYcIIKYA0Kg9KprRX5gH1I8hNg9Q7kj1Nbqx03qABW

53vvJrNaIVmrMY9phnTsFBIYWL2s1qbNWq3+379cyA+qe5DLRxzbFcSZyL7/oXyUDrJaoVirKR4o

wxV6irXkAj7ysdVUqxQA1qhYKx4zvYy4QgWwBlmtYeknzdyVnKECWKP1X3X9p+3kyTDCUAGsSdJQ

2y7/pC6XuHKHyvXaJo5gybpcOy+fMvjPnDlUQa3VJwZW3jkON7jBmDlU1UdA+3MSAyvu7A41N3ha

AFTJ0I5dWubdUp/TQ3dI1Q1SekcPYA1wh4b17DFBsBa9yQhBsGLbunj1WeFX5e8bxZPWOR7KHbJI

Rm4mhlSw1HzVAWqDdJSDiaFNY9JWf05fb+QN+oJ0FJWVuAmhGoulz45eoS9IR9FZSWxgnRHLQHrG

vWcbWC8qWFAXpKeozLzYLNYFeoL0lItusZ5ksBVxtFjUVy7UbmTN0GKJRHu80WaDorEI3CF9B4jO

TPykucE7swav0e3e5K54vmTD1Q1C5nWHAqxn5YMb9AMZKCo7z7rFeod+IAPlXbdYOJYEMrX8BksN

3jEjhAwVlZ1kA31AXAjAgjiRJ86NQ+YdFgsCixWOIPNOx2JhHRbECVjIaUEQY0EAFgRgQSAAC7L6

7/U9cmCp62hSdFNwUIltmE4EjqFR2TmLPNadsdJZZ961bcjFLtf/1D9JYbHmfaOB9QU2IJhBk68+

720fScu1nalKKjt3YbHEqzvNLiExJ+Uzz7zbdisWWzSJtv/0XB+VnYtusRLYAhZSzmC5Et0VnjVz

CgFcfd1ypLFzFmDdtC9hZkgzptoShkv3dLeN3DwL7pA+VEN3dy49bPv5yQ0KppoEqeoOn9GVpKDa

jYBqJY3Gq+Nqqsz8ZqkB6w0WiyRUAqjvI6HykdtSmXlTG5BR3UQ2xKNJpoLK93bjQwN30wa3TwZX

KEQE8AcGnRNk5n2Cgz19WaqGlZXRFRp2v32BI5rV/Y2dyfl8tKOy8vdu25rpvRJS9GJc4YSncGw9

1vnaei5RCAcIMAYq0o4PGRNXeYOr7QCBtiAsB1hBQSUO2Ep8wtX5BDCihzSxBWtKqJTf9AZXp0Oa

5BfJHSvHFSwXUGku6uQSrr7HypFzhxzBcgmV5fcrB23Ie+U+qR3dyw0s6aquEwTpXaFysmy519G9

FneYAqxJoapcZdQtUEUO2pEOSm9ojS8BFqBqybdVff6xoPLskANYE8VUrc/+tM52CZUehxdjIv4d

wAJU8l67UZmD+h+OWsMigLV4qCLNnR+nCNB2AMs7VKc2i+ATKou1Sof+0OxWK0SwJoQq6ghV6QGq

8daKktUKDaw5oPLUrt2kaai5rZbWmARQzQLVdNaqxWoVnjur6pXhBVQu2lY4SZprVsur5TAsfttT

e/fRB1RaB/uEKtHqeQzjx7vl1MZmrKlL5xmd71fnnRsVgznMPY+aaulQzWCJc+dhkCGA8xrIS8tV

MgOMMlSj+nvd82ZiTbMaQB/W6/W3GRotkoYxAf2PCQnEWzTibZo7UbBEP6tr2L/VdT04vSHFtfEz

KH7L0VJZXODex01NJjJZIFhHplAls4U8hlfFSCvLUbzHESpT2iTzXQl9llguCKyCG1SWnGFBhe58

IWBVDKHKydTZkrzMmEO1ZQhVZlgDFlOsVMIYrK6Pbiofy1kcBOuzv0DTNopZwmV4tGWSq3QrUSDt

qebaUGRo4Fdxmyk+2A2G3MPxnmkjuhMwg+LZpCEsKYZKzhDjwNpimniV1Ct94giXlhA9kXMZ/QbI

X30U6mgIOuZSFjseQ94H3xJThTPwucHV7D3FYOJRBe9NWuBineci2hcZC6g6zKRydLc3/ecG/Zdc

GmeCq1zSg+uZPEbJFiotTjE97sBJGG7iqdOcuynPMbuqDHEXXOO0rs+k45R7w2PLaNrDNY52ffu+

+z9wVEJhyWTDek1jpT6kjqMlKiSzKOSI2KtzLHW0DNBs6cqxmfDljrjhFh8hRQ/rVcmdTiLo6DdQ

uxY9Ifk8YCQuFrAHQMGyTxA7LAqwDkAhFh2o2PTB+3slx/yMbHfbosIj+7wUEcCa5cBxwG2MZRuu

AIoeYE1CMAjIFJgevaABoDx2SNHh/b6r/F5GISaTMVMm6/ToPJ0glz03smYA2ba+fF193hnFJmdZ

Ls3frnZ7kSAnsjwrfz8SsaPLr7peP0Pul+DB0joy6wFZI3cJ2a0u7/Kz15bvmixf46a+rP5sr5RY

vtcK0+rPtlB3Dv3BBiwDZKmELF3R2EtLlZuEV8D0ygUm9mCZYjLFFb0MsChjpLGIb4r7vXHX+SLA

aoFNdVvP8hp1jIX02O0uy0V1r0uAyCT/CjAA+PnMSsvFmLwAAAAASUVORK5CYII=



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj--



docusign phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Aug 2024 17:48:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sijQO-000000000dk-3792

for dave@doctor.nl2k.ab.ca;

Mon, 26 Aug 2024 17:47:04 -0600

Resent-From: The Doctor

Resent-Date: Mon, 26 Aug 2024 17:47:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from correo.santapola.es ([158.255.239.251]:36512)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1siiX0-00000000IuU-0XGn

for root@nk.ca;

Mon, 26 Aug 2024 16:49:56 -0600

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id 0113C685AE

for ; Tue, 27 Aug 2024 00:25:24 +0200 (CEST)

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10032)

with ESMTP id I3di2DTi8Sq9 for ;

Tue, 27 Aug 2024 00:25:22 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id AAA596E276

for ; Mon, 26 Aug 2024 23:12:58 +0200 (CEST)

DKIM-Filter: OpenDKIM Filter v2.10.3 correo.santapola.es AAA596E276

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=santapola.es;

s=E309BD90-106C-11E7-BBB5-E105812D6CEF; t=1724706778;

bh=NuUAk+W+y3EJO+e7Zyk3wh2twCuiK22Y99yUn++qv0Q=;

h=From:To:MIME-Version:Date:Message-Id;

b=Eqsp5S//8RuaatqD3Q+J/1lxywMf4FLMAvMg6r2VAurKiu44pe8cR5onX750p6B81

LA5f1hwp3L/Wm8jKbbun/N/spy8+i1kqsVXO3TgVJe+FgouJMGl34bLvoiETk7tsXf

Q8NKeqmDurvfy+/0w/YsYRgRP4VpsrobDvhDLXg62rtuIDoIftMUi7swAJDdL++rcm

do8xYjheV/DkRzr5MUkouhyYSauZnkqB3V9orZVWgDkelRTe9E+/86U3VsRWJ8He1h

jjpW43fmhPkQweq86P6kUkxgk8JhD24tWina9UkNZ2ceq3HUEMcUb4Lg4ityYoqAsn

8cPRmb0erfAPQ==

X-Virus-Scanned: amavis at santapola.es

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10026)

with ESMTP id 3xZEOiRdcHcF for ;

Mon, 26 Aug 2024 23:12:58 +0200 (CEST)

Received: from HQ1 (unknown [172.208.64.254])

by correo.santapola.es (Postfix) with ESMTPSA id 0E6DF84734

for ; Mon, 26 Aug 2024 21:39:26 +0200 (CEST)

From: "DocuSign Via Nk.ca"

Subject: Complete via DocuSign: Signature Requested | 8/26/2024

To:

Content-Type: multipart/related; type="multipart/alternative"; boundary="sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj"

MIME-Version: 1.0

Date: Mon, 26 Aug 2024 19:39:06 +0000

Message-Id: <20242608193906BF9112C902-F1B5160829@santapola.es>

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:
sign. REVIEW DOCUMENTS https://mehreencreation.com/_id.html?send_id=eh&tvi2_RxT=www.networksolutionsemail.com%2FntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZldVkFuvAlhtlBYyzZlPwcjpjmntpdkptJegwgUbePDCPPdVkFuvAlhtlBY

[...]



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

[172.208.64.254 listed in dnsbl.ahbl.org]

[172.208.64.254 listed in dnsbl.ahbl.org]

[172.208.64.254 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 AC_FROM_MANY_DOTS Multiple periods in From user name

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Complete via DocuSign: Signature Requested | 8/26/2024



This is a multi-part message in MIME format



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj

Content-Type: multipart/alternative;

boundary="joRufYblLx=_ihDwTdayCm79jHZ17TzZxT"



--joRufYblLx=_ihDwTdayCm79jHZ17TzZxT

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








=A0



Hi root,

You have received

a document to review and sign.



REVIEW

DOCUMENTS

https://mehreencreation.com/_id.html?send_id=3Deh&tvi2_RxT=3Dwww.netw=

orksolutionsemail.com%2FntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZldVkFuvAlh=

tlBYyzZlPwcjpjmntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZlntpdkptJegwgUbePDC=

PPdVkFuvAlhtlBYyzZl&e=3Dcm9vdEBuay5jYQ=3D=3D



Nk.ca

DocuSign Administrator



root@nk.ca



Do Not

Share This EmailThis

email contains a secure link to=A0 Docusign

. Please do not share this email, link, or access code

with others.



=A0



--joRufYblLx=_ihDwTdayCm79jHZ17TzZxT

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">

Complete via DocuSign: Signature Requ=<br /><br /> ested | 8/26/2024




-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px">
style=3D"FONT-SIZE: 15px; FONT-FAMILY: Helvetica, Arial, 'Sans Serif',=

serif, EmojiFont; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSF=

ORM: none; FONT-WEIGHT: 400; COLOR: #242424; FONT-STYLE: normal; ORPHA=

NS: 2; WIDOWS: 2; MARGIN: 0px auto; LETTER-SPACING: normal; font-varia=

nt-ligatures: normal; font-variant-caps: normal; font-variant-numeric:=

inherit; font-variant-east-asian: inherit; font-variant-alternates: i=

nherit; font-variant-position: inherit; font-stretch: inherit; font-op=

tical-sizing: inherit; font-kerning: inherit; font-feature-settings: i=

nherit; font-variation-settings: inherit; -webkit-text-stroke-width: 0=

px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial" cellSpacing=3D0 cellPadding=3D0 widt=

h=3D"100%" border=3D0> =


"> 		=


D-COLOR: #ffffff" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" align=

=3Dcenter border=3D0>

PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 24px; PADDING-=

RIGHT: 24px">
ING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PAD=

DING-RIGHT: 0px" alt=3DDocuSign src=3D"cid:E79541433F84D026177C@HQ" wi=

dth=3D116>

ADDING-BOTTOM: 30px; PADDING-TOP: 0px; PADDING-LEFT: 24px; PADDING-RIG=

HT: 24px">
ellSpacing=3D0 cellPadding=3D0 width=3D"100%" align=3Dcenter border=3D=

0>

ans Serif'; WIDTH: 518px; WHITE-SPACE: normal !important; COLOR: #ffff=

ff; PADDING-BOTTOM: 36px; TEXT-ALIGN: center; PADDING-TOP: 28px; PADDI=

NG-LEFT: 36px; PADDING-RIGHT: 36px; BACKGROUND-COLOR: #1e4ca1; border-=

radius: 2px" align=3Dleft>
BORDER-RIGHT: 0px; WIDTH: 75px; VERTICAL-ALIGN: baseline; BORDER-BOTT=

OM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BOR=

DER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" src=3D"cid:FBAA4883B47=

344EBD8DA@HQ" width=3D75 height=3D75>
g=3D0 width=3D"100%" border=3D0> <=

/TR>

T-FAMILY: Helvetica, Arial, 'Sans Serif'; WHITE-SPACE: normal !importa=

nt; COLOR: #ffffff; TEXT-ALIGN: center; PADDING-TOP: 24px" align=3Dcen=

ter>Hi root,
You have received a document to review and sign.

er=3D0>

30px" align=3Dcenter>

; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; P=

ADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PAD=

DING-RIGHT: 0px">

=3D"FONT-SIZE: 15px; TEXT-DECORATION: none; FONT-FAMILY: Helvetica, Ar=

ial, 'Sans Serif'; WHITE-SPACE: normal !important; FONT-WEIGHT: bold; =

COLOR: #333333; TEXT-ALIGN: center; DISPLAY: block; BACKGROUND-COLOR: =

#ffc423; border-radius: 2px" height=3D44 align=3Dcenter>
NT-SIZE: 15px; TEXT-DECORATION: none; BORDER-TOP: 0px; FONT-FAMILY: He=

lvetica, Arial, 'Sans Serif'; BORDER-RIGHT: 0px; VERTICAL-ALIGN: basel=

ine; BORDER-BOTTOM: 0px; FONT-WEIGHT: bold; COLOR: #333333; PADDING-BO=

TTOM: 0px; TEXT-ALIGN: center; PADDING-TOP: 0px; PADDING-LEFT: 0px; BO=

RDER-LEFT: 0px; MARGIN: 0px; DISPLAY: inline-block; PADDING-RIGHT: 0px=

; BACKGROUND-COLOR: #ffc423; font-stretch: inherit; font-optical-sizin=

g: inherit; font-kerning: inherit; font-feature-settings: inherit; fon=

t-variation-settings: inherit; border-radius: 2px" href=3D"https://meh=

reencreation.com/_id.html?send_id=3Deh&tvi2_RxT=3Dwww.networksolutions=

email.com%2FntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZldVkFuvAlhtlBYyzZlPwcj=

pjmntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZlntpdkptJegwgUbePDCPPdVkFuvAlht=

lBYyzZl&e=3Dcm9vdEBuay5jYQ=3D=3D" rel=3D"noopener noreferrer" target=3D=

_blank>
GHT: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; PADDING-BOTTOM=

: 0px; PADDING-TOP: 0px; PADDING-LEFT: 24px; BORDER-LEFT: 0px; MARGIN:=

0px; LINE-HEIGHT: 44px; PADDING-RIGHT: 24px; font-stretch: inherit; f=

ont-optical-sizing: inherit; font-kerning: inherit; font-feature-setti=

ngs: inherit; font-variation-settings: inherit">REVIEW DOCUMENTS
N>

>

'Sans Serif'; WHITE-SPACE: normal !important; COLOR: #000000; PADDING=

-BOTTOM: 24px; PADDING-TOP: 0px; PADDING-LEFT: 24px; PADDING-RIGHT: 24=

px; BACKGROUND-COLOR: white">
rder=3D0>

TOM: 20px">

Y: Helvetica, Arial, 'Sans Serif', serif, EmojiFont; BORDER-RIGHT: 0px=

; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; FONT-WEIGHT: bold; COL=

OR: #333333; PADDING-BOTTOM: 0px; TEXT-ALIGN: left; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 18px; P=

ADDING-RIGHT: 0px; font-stretch: inherit; font-optical-sizing: inherit=

; font-kerning: inherit; font-feature-settings: inherit; font-variatio=

n-settings: inherit">Nk.ca DocuSign Administrator

FONT-SIZE: 15px; BORDER-TOP: 0px; FONT-FAMILY: Helvetica, Arial, 'Sans=

Serif', serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline=

; BORDER-BOTTOM: 0px; COLOR: #666666; PADDING-BOTTOM: 0px; TEXT-ALIGN:=

left; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: =

0px; LINE-HEIGHT: 18px; PADDING-RIGHT: 0px; font-stretch: inherit; fon=

t-optical-sizing: inherit; font-kerning: inherit; font-feature-setting=

s: inherit; font-variation-settings: inherit">root@nk.ca


G>Do No=

t Share This Email

, Arial, 'Sans Serif'; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TR=

ANSFORM: none; FONT-WEIGHT: 400; COLOR: #666666; FONT-STYLE: normal; O=

RPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: #eaeae=

a; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: i=

nitial; text-decoration-style: initial; text-decoration-color: initial=

">
ca, Arial, 'Sans Serif'; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-=

TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: #666666; FONT-S=

TYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline !important; LETTE=

R-SPACING: normal; BACKGROUND-COLOR: #eaeaea; TEXT-INDENT: 0px; font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=

le: initial; text-decoration-color: initial">This email contains a sec=

ure link to 
px; BORDER-TOP: 0px; FONT-FAMILY: Helvetica, Arial, 'Sans Serif'; BORD=

ER-RIGHT: 0px; VERTICAL-ALIGN: baseline; WHITE-SPACE: normal; WORD-SPA=

CING: 0px; BORDER-BOTTOM: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400;=

COLOR: #666666; PADDING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP:=

0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; ORPHANS: 2; WIDOWS: 2; MARG=

IN: 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR:=

#eaeaea; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-varia=

nt-caps: normal; font-variant-numeric: inherit; font-variant-east-asia=

n: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-optical-sizing: inherit; font-kern=

ing: inherit; font-feature-settings: inherit; font-variation-settings:=

inherit; -webkit-text-stroke-width: 0px; text-decoration-thickness: i=

nitial; text-decoration-style: initial; text-decoration-color: initial=

">Docusign . Please do not share this email, link, or access co=

de with others.
 
<=

/DIV>





--joRufYblLx=_ihDwTdayCm79jHZ17TzZxT--



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj

Content-Type: image/png;

name="email-logo.png"

Content-Transfer-Encoding: base64

Content-Disposition: inline;

filename="email-logo.png"

Content-ID:



iVBORw0KGgoAAAANSUhEUgAAAOQAAAAyCAYAAABMMHe/AAAACXBIWXMAAAsTAAALEwEAmpwYAAAA

AXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAoRSURBVHgB7Z3Pbhy3Hce/I9sB6kO7eQPmUiDo

IZtTbxHdc9FKySU3j59AzhNo9AR2nkCjW4AE8Ap9AI3yAl73XogqcjNaqyiQQ/5oMz9ziN2d/XGG

5Mzuzkr8AMTaHA5/MyR/JH/kjyMgEolEIpHIKolrwtnnn78of54jHIUkUZjNzvHBB5Pkm28UIpHI

EnvOKZNkjG6IUhll+fsCP/10Nfvii9PZl18KDIOjMrwrw6wMEpGhIMuQ4h7VibtC9s1slpaKeVEq

5gG2B8m+KsPLMowQGRKnZbhY+H2Ne1BH21NIDY2ar0qlfIrNI8vw6v0zRIZGWoVFaIbWxWTaCbat

kJrZ7OWApq+R7fPUM/7OMAyFpKnIzz+fIhLR3HjG3xmGopA0Ssot25OR4fC1Z/ydYTgKqTlCJAIU

ZTipxdH/c9xxhqWQNEpGWzKiycrwYRk+qn4z3AOGNkKi3AqRiEQ0ZDMq3APb0fDwb5gdzfSSciN/

ufizmD24aksG8fgxjj/++P1vELNZVweESGRneXirN8Vb+ed/H+M/eOuSFMXbt7j47LNQpRTozhjL

nYyCtkv6ZlTJETVZJvQlQ2J5U1yVYYphjxwCyx42Cvp5p9gMgpFfYL3U68q8r3LN4CHWgPrxRzz5

/vswpdzb+wPCoEKgRaHn4D06FPSiwAm6I8twDK2MNu8RqoivEb4QISsZsiFNUYazFhl0rb5/p6Bt

szZSaE+ZOh+Bb2RtdUBQI52U4bz6bYPyy6r8nqH5XY38FHzHbmRTG1BVXAZdzoucYNlmzbFahoeY

P79Ec105t4W12ZBGKel3AxgXuAz2hiCq61cIH4UFtBsXBYlmVy5S1tNKns80XNRkNCEXZAhsl6do

rwNU11JoL6krrHrkGFL4uTUKaPe6DPayGC3ke4xujKpAhy7a6sq0hVaZa13U2ZBSUo9Ilevq5yig

K+7v8EPATUls8ly8TERHGduyv6lDzOHvayqgG+oplpVIMHFN0Hu/hl+nlEEryCcIY7+S+dzjnqwt

/dpXWb2V8vb2f3BHwtEGrkENx6cgBbSiCISTo1kpRUcZI3R/xhAE9CjRhRThnYmAX4e8SAbdmYSQ

IqysqROwPutabMg6pIxn19fvV19bSRIfo7/J3c7YC9fQBUA9WmilNzV0HznUeVyCt79OHWV8gtWF

JMOoyucJNocE/yw5tJ1oFp7o2ajx7zPpyWZzsSc5jtFcbtSe3lT/p7KTWA8K2qa/XpDDKZ4ZDDIu

k40opBfuCpnCXhFkQGdYXYWkBvECfj1b2pD+K/AjtE2OsTkOGRkSPLZ3oUrleltZ5ZdjM3Cjfg69

AFPHKF2KuSIphG/6S9ht0En1DPVyE9Ajap/Te64diAY5+7AwPMeAX38tHFPaDGTqbamx3jDXqJJo

9FBwxyaHKts2XTZyuGcgZR05yqCKtr0LyT603Odir/YFNwqctdyTl+FT6M6my2hue0/Kl8qGKzdV

yS7QD7ZOWcHeBqydwbAUMknyZDK5cUgpYZ8mZWhGge+9feXkaJfzleXaov06bpBhU3hDgWWHayq7

kwa564BTSIl26FmpHBTCMCumdRTc1ge40dMXheY6ovzPmXh6dsHdMDSFbOtZDbYexvX+Am49pLTE

n8CNHHyl7zvIcH2XrJJDvbHx+Zxic1wyccdotu36wNYGXOtGwb2M0UGWV10MRyFpdPzuu8IxNTcH

p4ZfwJ1LhzScHC/PC/CVPm6R4fMulPYZ1u+FYiO3xGfQ+320IEZ2M03VBfrDppAF3JmgGy7K5jUK

D0UhFR49cu3ZCG6a5DsquKTn5FzDj6klX1H9WzjeM1QKNCuBhJ5CGkcACrQS3HVRRTBx1PgV3Ola

zr3X0xAU8gYPHhx6fhaSUxQFX7lhct6hX/p4l21DCyiu0z8BbfvRpnqXbxpx5eZrE3axIbvanyzb

VkhVKuOT5Ntvd2lE8GUtFTcw6B1T6Kmz8riPprHb9DDqwnYV8lG/X+DTq4G3t58GKqPXUrKF0Bf6

0DO9aLnex7tsGltjzKEdz2mBiVZ/Xc2CC/jXh2LihGc+gytnZ8eAP5V2+e87PP+7/98UwL/Psbc3

xS+/TB23N2xwdpyArgzXfKVDmilWFWoffnC+kou2DnmR1AtWYNi0lXGBuV1JdTKuApXdAZO+0XvF

grLEj+G+sLO7Cvm7so38sYOD/L9+wGXyQ/IS/UCKUt8UNhVfwA0X53JaiT1g5EgPOZKJm9b+/bSD

DAG9SHJWpVe164q5x3UUEUxciJ1WVOEl7B4sVB8Z3Cks8cdwr5vwBr0mhuep48bEEu9awCncRqFp

Rzm2vbjFBZCu72LO4ZljWKdYPZhbZwS3GYJt22eRFH4NW4F3XAiZsiomXsLt3eiUkMDA2FWFVOB7

QYn2kwdjuJ9OKGCX09YISU7WkK9BIVyGOYy7SFq7r7Dc25a3BN+w3zD5ZNjOSRPbym7b0S2JgX40

a1cVkrBVBtkiXIVQD0yNx3cBwbY/mrXIeW25L8dqzx4igzoVmwmwWDYKdoW3NVyapr8Cz6SWh1j4

tzn4K2BnBP6UjoI/9P7cFFqA3++UmP+tEN8ReSMM77SHOzm07SWZa2kVaHpFFWY24kMqoYBuhAc9

yFHgla+AXpU8apBRVPePW2TQs+a1OFJQ2ZC3eX6g+bMkCsvKzTl3Z1WgdOeYf0tHQC9wpQhzSOfQ

q/X2GU8K+2mQQbLLCknQvlfTX0UaN9x7A3cFfQa7E3ibnEV5TSdNMuiFDWG5LtGOAm+f5dDKbntO

l+cn6p1Jk9eShPvZQ4Xw42I0StLzh5xw8WkDG2GXp6yEgv2Ii8t9yjF9mzL1cX9XGarl/kN08wAi

ZcxrcRm6fzRMofuB6hT+I6yCPoa1TSSWP8p1tOsKSdB0iwpWOaYvoBvAFH4NlNLSprdvAyygn2/q

kFZhfk7QV0abMiuEKTx1FDTqZpbrFE/lEjLlLNCtE1okxfLX5JrIocvZ1pErbIaiDOaTNWQSHez6

lNWgoBtFCrtdWUBXWLEQ94ZJ1zbaZpifu+Q+R2HyIFvO7A36QPc+h56KZT3LUJiXE02PJZrtxTPY

F07qaVPMv1Fj8uagvKhzqtdFncIip4kMum4kdDsw9rBxxLiELrOiSi9hf8a63IKJc8Hsw3Lx5tc8

n0r+ihkVeOiXt5xJyl7/H0gm2AzGSYAwL+s7rQ2RBdj3x7pQX2hR6E+GwOqHnk0jWUfeCsOB2j63

kOY6o4lEIgwpwhZnaGtkVgtXiEQiwQjMFUl43HeMVWWkcIpIJBIEjYr1Ua7NMYF4AV4ZKUhEIpEg

mhSLPI1ocUxWgRabSFnfNdxzgUgkEgQ3OnYJpKgCkUgkGIH+lDJFJBLpDI2UtH3RZWRMEYlEekVA

OwU02YiczSgwIBJEIncPWsCR0A4vI6z+RWPy0MpxPz5AFolEIpHIHeA3xHUJZ/3GWR8AAAAASUVO

RK5CYII=



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj

Content-Type: image/png;

name="docInvite-white.png"

Content-Transfer-Encoding: base64

Content-Disposition: inline;

filename="docInvite-white.png"

Content-ID:



iVBORw0KGgoAAAANSUhEUgAAAJYAAACWCAYAAAA8AXHiAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJ

bWFnZVJlYWR5ccllPAAACZ1JREFUeNrsnY1xozoQx21PCqCDo4PQQXgVHNeBS6CDcwfMVcB1YF8F

TiqwXYGdCnAHeehOvKfoJMyXxGr574yGjMcx0uqn3dUipKfVQuXj4yOuL6IkdYnq8iyvkfysj5zr

cpflIq/is9t6vb4tUb/rBUEkYHmR1wYmH9JA9iav5yXAtmYKkoAmrctXeY2JVVGA9VqXX+Jag3YH

WLRhyiRM2QCLIjr7XX722vP2qbx+0dxrVzlIyA5cIFszAGrbA6azLBfFLd0dgt643Wfl706Q1fX6

uYL4j5nqUtSl+miXq/xeJjt6dqsq61LIurVJJb8Xo8fdd0xal+ODDjnVJQ+hQ+QAyWWd20S0OQUB

/oG6hgJTB8iuAGx+oEqOipbtLgHY9IpNWoASsceOQszkKSbbtcSSQkcJiOmmyGLpQA0ArFiiXroq

L7MobrFA9QRMfJaBpM/K2mMkTmbZ94vXWYuVQuwwLhZdpvVqGXFCITmQ6a3P3DJAl2PxZb7mBBPu

LaQ4sc/ey/xMBSvl3XpVbPNe4mGxZTQhlnITe5m8wpZbQ0tL1hyuz61rNOqdM1RwfX5dIx+45Ig5

YRpMoi9MaZ1TcB6jBSrEU/PGXeHCBagAl6vKn4I3ufyD+r/6KLRAHVCFA1cZClQVoCIPV0UaLkPy

EzFVuDHXlkrlUkDFDq5s7krF5CoFGdKPmcE4xJQCwDwwhZYfYUgl6xo71EVOYuJlWE9VAiovgCUe

dVLMbTqDSisECpVzN2XxQpmvTtGnqUEF6xaoIsL1TQ0L+EqH90sM/Rv5aOg+1LjKZqkCqbuq98rx

vfR4a+/bBe5DhyogsFKfdTYYkMzVjaJZTKSHmCqQNkSewfLT34ZZYM4BqlDAkm3xWmeDSyymvkGi

v/fHafYHsFrvqb+3mITx4wRSCgBrBqNieBZYcIIKYA0Kg9KprRX5gH1I8hNg9Q7kj1Nbqx03qABW

53vvJrNaIVmrMY9phnTsFBIYWL2s1qbNWq3+379cyA+qe5DLRxzbFcSZyL7/oXyUDrJaoVirKR4o

wxV6irXkAj7ysdVUqxQA1qhYKx4zvYy4QgWwBlmtYeknzdyVnKECWKP1X3X9p+3kyTDCUAGsSdJQ

2y7/pC6XuHKHyvXaJo5gybpcOy+fMvjPnDlUQa3VJwZW3jkON7jBmDlU1UdA+3MSAyvu7A41N3ha

AFTJ0I5dWubdUp/TQ3dI1Q1SekcPYA1wh4b17DFBsBa9yQhBsGLbunj1WeFX5e8bxZPWOR7KHbJI

Rm4mhlSw1HzVAWqDdJSDiaFNY9JWf05fb+QN+oJ0FJWVuAmhGoulz45eoS9IR9FZSWxgnRHLQHrG

vWcbWC8qWFAXpKeozLzYLNYFeoL0lItusZ5ksBVxtFjUVy7UbmTN0GKJRHu80WaDorEI3CF9B4jO

TPykucE7swav0e3e5K54vmTD1Q1C5nWHAqxn5YMb9AMZKCo7z7rFeod+IAPlXbdYOJYEMrX8BksN

3jEjhAwVlZ1kA31AXAjAgjiRJ86NQ+YdFgsCixWOIPNOx2JhHRbECVjIaUEQY0EAFgRgQSAAC7L6

7/U9cmCp62hSdFNwUIltmE4EjqFR2TmLPNadsdJZZ961bcjFLtf/1D9JYbHmfaOB9QU2IJhBk68+

720fScu1nalKKjt3YbHEqzvNLiExJ+Uzz7zbdisWWzSJtv/0XB+VnYtusRLYAhZSzmC5Et0VnjVz

CgFcfd1ypLFzFmDdtC9hZkgzptoShkv3dLeN3DwL7pA+VEN3dy49bPv5yQ0KppoEqeoOn9GVpKDa

jYBqJY3Gq+Nqqsz8ZqkB6w0WiyRUAqjvI6HykdtSmXlTG5BR3UQ2xKNJpoLK93bjQwN30wa3TwZX

KEQE8AcGnRNk5n2Cgz19WaqGlZXRFRp2v32BI5rV/Y2dyfl8tKOy8vdu25rpvRJS9GJc4YSncGw9

1vnaei5RCAcIMAYq0o4PGRNXeYOr7QCBtiAsB1hBQSUO2Ep8wtX5BDCihzSxBWtKqJTf9AZXp0Oa

5BfJHSvHFSwXUGku6uQSrr7HypFzhxzBcgmV5fcrB23Ie+U+qR3dyw0s6aquEwTpXaFysmy519G9

FneYAqxJoapcZdQtUEUO2pEOSm9ojS8BFqBqybdVff6xoPLskANYE8VUrc/+tM52CZUehxdjIv4d

wAJU8l67UZmD+h+OWsMigLV4qCLNnR+nCNB2AMs7VKc2i+ATKou1Sof+0OxWK0SwJoQq6ghV6QGq

8daKktUKDaw5oPLUrt2kaai5rZbWmARQzQLVdNaqxWoVnjur6pXhBVQu2lY4SZprVsur5TAsfttT

e/fRB1RaB/uEKtHqeQzjx7vl1MZmrKlL5xmd71fnnRsVgznMPY+aaulQzWCJc+dhkCGA8xrIS8tV

MgOMMlSj+nvd82ZiTbMaQB/W6/W3GRotkoYxAf2PCQnEWzTibZo7UbBEP6tr2L/VdT04vSHFtfEz

KH7L0VJZXODex01NJjJZIFhHplAls4U8hlfFSCvLUbzHESpT2iTzXQl9llguCKyCG1SWnGFBhe58

IWBVDKHKydTZkrzMmEO1ZQhVZlgDFlOsVMIYrK6Pbiofy1kcBOuzv0DTNopZwmV4tGWSq3QrUSDt

qebaUGRo4Fdxmyk+2A2G3MPxnmkjuhMwg+LZpCEsKYZKzhDjwNpimniV1Ct94giXlhA9kXMZ/QbI

X30U6mgIOuZSFjseQ94H3xJThTPwucHV7D3FYOJRBe9NWuBineci2hcZC6g6zKRydLc3/ecG/Zdc

GmeCq1zSg+uZPEbJFiotTjE97sBJGG7iqdOcuynPMbuqDHEXXOO0rs+k45R7w2PLaNrDNY52ffu+

+z9wVEJhyWTDek1jpT6kjqMlKiSzKOSI2KtzLHW0DNBs6cqxmfDljrjhFh8hRQ/rVcmdTiLo6DdQ

uxY9Ifk8YCQuFrAHQMGyTxA7LAqwDkAhFh2o2PTB+3slx/yMbHfbosIj+7wUEcCa5cBxwG2MZRuu

AIoeYE1CMAjIFJgevaABoDx2SNHh/b6r/F5GISaTMVMm6/ToPJ0glz03smYA2ba+fF193hnFJmdZ

Ls3frnZ7kSAnsjwrfz8SsaPLr7peP0Pul+DB0joy6wFZI3cJ2a0u7/Kz15bvmixf46a+rP5sr5RY

vtcK0+rPtlB3Dv3BBiwDZKmELF3R2EtLlZuEV8D0ygUm9mCZYjLFFb0MsChjpLGIb4r7vXHX+SLA

aoFNdVvP8hp1jIX02O0uy0V1r0uAyCT/CjAA+PnMSsvFmLwAAAAASUVORK5CYII=



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj--



docusign phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Aug 2024 16:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1siiDg-00000000Gut-099O

for dave@doctor.nl2k.ab.ca;

Mon, 26 Aug 2024 16:29:52 -0600

Resent-From: The Doctor

Resent-Date: Mon, 26 Aug 2024 16:29:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from correo.santapola.es ([158.255.239.251]:38896)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sihAR-000000009ZK-3chI

for doctor@nl2k.ab.ca;

Mon, 26 Aug 2024 15:22:32 -0600

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id B9C54781D1

for ; Mon, 26 Aug 2024 21:38:30 +0200 (CEST)

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10032)

with ESMTP id a9ZIDE0TeRs9 for ;

Mon, 26 Aug 2024 21:38:29 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id 81B086CEC2

for ; Mon, 26 Aug 2024 20:27:41 +0200 (CEST)

DKIM-Filter: OpenDKIM Filter v2.10.3 correo.santapola.es 81B086CEC2

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=santapola.es;

s=E309BD90-106C-11E7-BBB5-E105812D6CEF; t=1724696861;

bh=NF3PK5BK7DrB/Lij5Rgz70GAp9slm2lRvbJS+bMb1A8=;

h=From:To:MIME-Version:Date:Message-Id;

b=ThGAckRJ6Eow0Sa7X05lrn8pR7V8x6sCJ7/MiovjYcuvjC0se81dyN21nJQcX/fo6

oPvGLj+TSypHd+9KWffBssQz+5CtSQReL4baUsx3bNCdJB1Jp2XtrpYdWMkYy539++

MHpO+k2zBOg+Q8h6nMCo9/kpd3DiaSyDBtuv+aAnhUuEcXK5s+XBzSbRPRtNXO00Ti

xVuj89DwOjFKOgSjD41DBCQFw8bHqv+J9zjwRy1Qr0kMFHEU4V8u6a/W+7IygguJ1G

Ehym1ebeA71sUACB6PHHch76gLzI0CglkVd8a6CXQkpiyHHvNcenRn75vpEMNR4QEV

NVBhrGcRiruCQ==

X-Virus-Scanned: amavis at santapola.es

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10026)

with ESMTP id XJE-7hA5DePF for ;

Mon, 26 Aug 2024 20:27:41 +0200 (CEST)

Received: from HQ1 (unknown [172.208.64.254])

by correo.santapola.es (Postfix) with ESMTPSA id 083B265080

for ; Mon, 26 Aug 2024 20:01:09 +0200 (CEST)

From: "DocuSign Via Nl2k.ab.ca"

Subject: Complete via DocuSign: Signature Requested | 8/26/2024

To:

Content-Type: multipart/related; type="multipart/alternative"; boundary="sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj"

MIME-Version: 1.0

Date: Mon, 26 Aug 2024 18:00:49 +0000

Message-Id: <264920240800184BEDB0748D-9322D20F73@santapola.es>

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:
sign. REVIEW DOCUMENTS https://mehreencreation.com/_id.html?send_id=eh&tvi2_RxT=www.networksolutionsemail.com%2FntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZldVkFuvAlhtlBYyzZlPwcjpjmntpdkptJegwgUbePDCPPdVkFuvAlhtlBY

[...]



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[172.208.64.254 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

[172.208.64.254 listed in dnsbl.ahbl.org]

[172.208.64.254 listed in dnsbl.ahbl.org]

[172.208.64.254 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.208.64.254 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 AC_FROM_MANY_DOTS Multiple periods in From user name

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Complete via DocuSign: Signature Requested | 8/26/2024



This is a multi-part message in MIME format



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj

Content-Type: multipart/alternative;

boundary="joRufYblLx=_ihDwTdayCm79jHZ17TzZxT"



--joRufYblLx=_ihDwTdayCm79jHZ17TzZxT

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








=A0



Hi doctor,

You have received

a document to review and sign.



REVIEW

DOCUMENTS

https://mehreencreation.com/_id.html?send_id=3Deh&tvi2_RxT=3Dwww.netw=

orksolutionsemail.com%2FntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZldVkFuvAlh=

tlBYyzZlPwcjpjmntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZlntpdkptJegwgUbePDC=

PPdVkFuvAlhtlBYyzZl&e=3DZG9jdG9yQG5sMmsuYWIuY2E=3D



Nl2k.ab.ca

DocuSign Administrator



doctor@nl2k.ab.ca



Do Not

Share This EmailThis

email contains a secure link to=A0 Docusign

. Please do not share this email, link, or access code

with others.



=A0



--joRufYblLx=_ihDwTdayCm79jHZ17TzZxT

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">

Complete via DocuSign: Signature Requ=<br /><br /> ested | 8/26/2024




-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px">
style=3D"FONT-SIZE: 15px; FONT-FAMILY: Helvetica, Arial, 'Sans Serif',=

serif, EmojiFont; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSF=

ORM: none; FONT-WEIGHT: 400; COLOR: #242424; FONT-STYLE: normal; ORPHA=

NS: 2; WIDOWS: 2; MARGIN: 0px auto; LETTER-SPACING: normal; font-varia=

nt-ligatures: normal; font-variant-caps: normal; font-variant-numeric:=

inherit; font-variant-east-asian: inherit; font-variant-alternates: i=

nherit; font-variant-position: inherit; font-stretch: inherit; font-op=

tical-sizing: inherit; font-kerning: inherit; font-feature-settings: i=

nherit; font-variation-settings: inherit; -webkit-text-stroke-width: 0=

px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial" cellSpacing=3D0 cellPadding=3D0 widt=

h=3D"100%" border=3D0>

"> 		=


D-COLOR: #ffffff" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" align=

=3Dcenter border=3D0>

PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 24px; PADDING-=

RIGHT: 24px">
ING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PAD=

DING-RIGHT: 0px" alt=3DDocuSign src=3D"cid:1EF61AE88737E571DF5E@HQ" wi=

dth=3D116>

ADDING-BOTTOM: 30px; PADDING-TOP: 0px; PADDING-LEFT: 24px; PADDING-RIG=

HT: 24px">
ellSpacing=3D0 cellPadding=3D0 width=3D"100%" align=3Dcenter border=3D=

0>
ABLE>

ans Serif'; WIDTH: 518px; WHITE-SPACE: normal !important; COLOR: #ffff=

ff; PADDING-BOTTOM: 36px; TEXT-ALIGN: center; PADDING-TOP: 28px; PADDI=

NG-LEFT: 36px; PADDING-RIGHT: 36px; BACKGROUND-COLOR: #1e4ca1; border-=

radius: 2px" align=3Dleft>
BORDER-RIGHT: 0px; WIDTH: 75px; VERTICAL-ALIGN: baseline; BORDER-BOTT=

OM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BOR=

DER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" src=3D"cid:49F457A69BB=

F5016121F@HQ" width=3D75 height=3D75>
g=3D0 width=3D"100%" border=3D0>

T-FAMILY: Helvetica, Arial, 'Sans Serif'; WHITE-SPACE: normal !importa=

nt; COLOR: #ffffff; TEXT-ALIGN: center; PADDING-TOP: 24px" align=3Dcen=

ter>Hi doctor,
You have received a document to review and sign.
>

rder=3D0>

: 30px" align=3Dcenter>

px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px;=

PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; P=

ADDING-RIGHT: 0px">

le=3D"FONT-SIZE: 15px; TEXT-DECORATION: none; FONT-FAMILY: Helvetica, =

Arial, 'Sans Serif'; WHITE-SPACE: normal !important; FONT-WEIGHT: bold=

; COLOR: #333333; TEXT-ALIGN: center; DISPLAY: block; BACKGROUND-COLOR=

: #ffc423; border-radius: 2px" height=3D44 align=3Dcenter>
FONT-SIZE: 15px; TEXT-DECORATION: none; BORDER-TOP: 0px; FONT-FAMILY: =

Helvetica, Arial, 'Sans Serif'; BORDER-RIGHT: 0px; VERTICAL-ALIGN: bas=

eline; BORDER-BOTTOM: 0px; FONT-WEIGHT: bold; COLOR: #333333; PADDING-=

BOTTOM: 0px; TEXT-ALIGN: center; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: 0px; MARGIN: 0px; DISPLAY: inline-block; PADDING-RIGHT: 0=

px; BACKGROUND-COLOR: #ffc423; font-stretch: inherit; font-optical-siz=

ing: inherit; font-kerning: inherit; font-feature-settings: inherit; f=

ont-variation-settings: inherit; border-radius: 2px" href=3D"https://m=

ehreencreation.com/_id.html?send_id=3Deh&tvi2_RxT=3Dwww.networksolutio=

nsemail.com%2FntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZldVkFuvAlhtlBYyzZlPw=

cjpjmntpdkptJegwgUbePDCPPdVkFuvAlhtlBYyzZlntpdkptJegwgUbePDCPPdVkFuvAl=

htlBYyzZl&e=3DZG9jdG9yQG5sMmsuYWIuY2E=3D" rel=3D"noopener noreferrer" =

target=3D_blank>
BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; PADDI=

NG-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 24px; BORDER-LEFT: 0px=

; MARGIN: 0px; LINE-HEIGHT: 44px; PADDING-RIGHT: 24px; font-stretch: i=

nherit; font-optical-sizing: inherit; font-kerning: inherit; font-feat=

ure-settings: inherit; font-variation-settings: inherit">REVIEW DOCUME=

NTS

a, Arial, 'Sans Serif'; WHITE-SPACE: normal !important; COLOR: #000000=

; PADDING-BOTTOM: 24px; PADDING-TOP: 0px; PADDING-LEFT: 24px; PADDING-=

RIGHT: 24px; BACKGROUND-COLOR: white">
ng=3D0 border=3D0>

DDING-BOTTOM: 20px">

ONT-FAMILY: Helvetica, Arial, 'Sans Serif', serif, EmojiFont; BORDER-R=

IGHT: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; FONT-WEIGHT: =

bold; COLOR: #333333; PADDING-BOTTOM: 0px; TEXT-ALIGN: left; PADDING-T=

OP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT=

: 18px; PADDING-RIGHT: 0px; font-stretch: inherit; font-optical-sizing=

: inherit; font-kerning: inherit; font-feature-settings: inherit; font=

-variation-settings: inherit">Nl2k.ab.ca DocuSign Administrator
=


, Arial, 'Sans Serif', serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-A=

LIGN: baseline; BORDER-BOTTOM: 0px; COLOR: #666666; PADDING-BOTTOM: 0p=

x; TEXT-ALIGN: left; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT:=

0px; MARGIN: 0px; LINE-HEIGHT: 18px; PADDING-RIGHT: 0px; font-stretch=

: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-f=

eature-settings: inherit; font-variation-settings: inherit">doctor@nl2=

k.ab.ca


COLOR: #eaeaea">Do Not Share This Email

ONT-FAMILY: Helvetica, Arial, 'Sans Serif'; WHITE-SPACE: normal; WORD-=

SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: #666666; =

FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BAC=

KGROUND-COLOR: #eaeaea; TEXT-INDENT: 0px; font-variant-ligatures: norm=

al; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-de=

coration-thickness: initial; text-decoration-style: initial; text-deco=

ration-color: initial">
FONT-FAMILY: Helvetica, Arial, 'Sans Serif'; WHITE-SPACE: normal; WOR=

D-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; C=

OLOR: #666666; FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inl=

ine !important; LETTER-SPACING: normal; BACKGROUND-COLOR: #eaeaea; TEX=

T-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: norm=

al; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial=

; text-decoration-style: initial; text-decoration-color: initial">This=

email contains a secure link to 
tyle=3D"FONT-SIZE: 13px; BORDER-TOP: 0px; FONT-FAMILY: Helvetica, Aria=

l, 'Sans Serif'; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; WHITE-SP=

ACE: normal; WORD-SPACING: 0px; BORDER-BOTTOM: 0px; TEXT-TRANSFORM: no=

ne; FONT-WEIGHT: 400; COLOR: #666666; PADDING-BOTTOM: 0px; FONT-STYLE:=

normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; ORPHAN=

S: 2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0=

px; BACKGROUND-COLOR: #eaeaea; TEXT-INDENT: 0px; font-variant-ligature=

s: normal; font-variant-caps: normal; font-variant-numeric: inherit; f=

ont-variant-east-asian: inherit; font-variant-alternates: inherit; fon=

t-variant-position: inherit; font-stretch: inherit; font-optical-sizin=

g: inherit; font-kerning: inherit; font-feature-settings: inherit; fon=

t-variation-settings: inherit; -webkit-text-stroke-width: 0px; text-de=

coration-thickness: initial; text-decoration-style: initial; text-deco=

ration-color: initial">Docusign . Please do not share this emai=

l, link, or access code with others.

TD>
&nbs=

p;






--joRufYblLx=_ihDwTdayCm79jHZ17TzZxT--



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj

Content-Type: image/png;

name="email-logo.png"

Content-Transfer-Encoding: base64

Content-Disposition: inline;

filename="email-logo.png"

Content-ID: <1EF61AE88737E571DF5E@HQ>



iVBORw0KGgoAAAANSUhEUgAAAOQAAAAyCAYAAABMMHe/AAAACXBIWXMAAAsTAAALEwEAmpwYAAAA

AXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAoRSURBVHgB7Z3Pbhy3Hce/I9sB6kO7eQPmUiDo

IZtTbxHdc9FKySU3j59AzhNo9AR2nkCjW4AE8Ap9AI3yAl73XogqcjNaqyiQQ/5oMz9ziN2d/XGG

5Mzuzkr8AMTaHA5/MyR/JH/kjyMgEolEIpHIKolrwtnnn78of54jHIUkUZjNzvHBB5Pkm28UIpHI

EnvOKZNkjG6IUhll+fsCP/10Nfvii9PZl18KDIOjMrwrw6wMEpGhIMuQ4h7VibtC9s1slpaKeVEq

5gG2B8m+KsPLMowQGRKnZbhY+H2Ne1BH21NIDY2ar0qlfIrNI8vw6v0zRIZGWoVFaIbWxWTaCbat

kJrZ7OWApq+R7fPUM/7OMAyFpKnIzz+fIhLR3HjG3xmGopA0Ssot25OR4fC1Z/ydYTgKqTlCJAIU

ZTipxdH/c9xxhqWQNEpGWzKiycrwYRk+qn4z3AOGNkKi3AqRiEQ0ZDMq3APb0fDwb5gdzfSSciN/

ufizmD24aksG8fgxjj/++P1vELNZVweESGRneXirN8Vb+ed/H+M/eOuSFMXbt7j47LNQpRTozhjL

nYyCtkv6ZlTJETVZJvQlQ2J5U1yVYYphjxwCyx42Cvp5p9gMgpFfYL3U68q8r3LN4CHWgPrxRzz5

/vswpdzb+wPCoEKgRaHn4D06FPSiwAm6I8twDK2MNu8RqoivEb4QISsZsiFNUYazFhl0rb5/p6Bt

szZSaE+ZOh+Bb2RtdUBQI52U4bz6bYPyy6r8nqH5XY38FHzHbmRTG1BVXAZdzoucYNlmzbFahoeY

P79Ec105t4W12ZBGKel3AxgXuAz2hiCq61cIH4UFtBsXBYlmVy5S1tNKns80XNRkNCEXZAhsl6do

rwNU11JoL6krrHrkGFL4uTUKaPe6DPayGC3ke4xujKpAhy7a6sq0hVaZa13U2ZBSUo9Ilevq5yig

K+7v8EPATUls8ly8TERHGduyv6lDzOHvayqgG+oplpVIMHFN0Hu/hl+nlEEryCcIY7+S+dzjnqwt

/dpXWb2V8vb2f3BHwtEGrkENx6cgBbSiCISTo1kpRUcZI3R/xhAE9CjRhRThnYmAX4e8SAbdmYSQ

IqysqROwPutabMg6pIxn19fvV19bSRIfo7/J3c7YC9fQBUA9WmilNzV0HznUeVyCt79OHWV8gtWF

JMOoyucJNocE/yw5tJ1oFp7o2ajx7zPpyWZzsSc5jtFcbtSe3lT/p7KTWA8K2qa/XpDDKZ4ZDDIu

k40opBfuCpnCXhFkQGdYXYWkBvECfj1b2pD+K/AjtE2OsTkOGRkSPLZ3oUrleltZ5ZdjM3Cjfg69

AFPHKF2KuSIphG/6S9ht0En1DPVyE9Ajap/Te64diAY5+7AwPMeAX38tHFPaDGTqbamx3jDXqJJo

9FBwxyaHKts2XTZyuGcgZR05yqCKtr0LyT603Odir/YFNwqctdyTl+FT6M6my2hue0/Kl8qGKzdV

yS7QD7ZOWcHeBqydwbAUMknyZDK5cUgpYZ8mZWhGge+9feXkaJfzleXaov06bpBhU3hDgWWHayq7

kwa564BTSIl26FmpHBTCMCumdRTc1ge40dMXheY6ovzPmXh6dsHdMDSFbOtZDbYexvX+Am49pLTE

n8CNHHyl7zvIcH2XrJJDvbHx+Zxic1wyccdotu36wNYGXOtGwb2M0UGWV10MRyFpdPzuu8IxNTcH

p4ZfwJ1LhzScHC/PC/CVPm6R4fMulPYZ1u+FYiO3xGfQ+320IEZ2M03VBfrDppAF3JmgGy7K5jUK

D0UhFR49cu3ZCG6a5DsquKTn5FzDj6klX1H9WzjeM1QKNCuBhJ5CGkcACrQS3HVRRTBx1PgV3Ola

zr3X0xAU8gYPHhx6fhaSUxQFX7lhct6hX/p4l21DCyiu0z8BbfvRpnqXbxpx5eZrE3axIbvanyzb

VkhVKuOT5Ntvd2lE8GUtFTcw6B1T6Kmz8riPprHb9DDqwnYV8lG/X+DTq4G3t58GKqPXUrKF0Bf6

0DO9aLnex7tsGltjzKEdz2mBiVZ/Xc2CC/jXh2LihGc+gytnZ8eAP5V2+e87PP+7/98UwL/Psbc3

xS+/TB23N2xwdpyArgzXfKVDmilWFWoffnC+kou2DnmR1AtWYNi0lXGBuV1JdTKuApXdAZO+0XvF

grLEj+G+sLO7Cvm7so38sYOD/L9+wGXyQ/IS/UCKUt8UNhVfwA0X53JaiT1g5EgPOZKJm9b+/bSD

DAG9SHJWpVe164q5x3UUEUxciJ1WVOEl7B4sVB8Z3Cks8cdwr5vwBr0mhuep48bEEu9awCncRqFp

Rzm2vbjFBZCu72LO4ZljWKdYPZhbZwS3GYJt22eRFH4NW4F3XAiZsiomXsLt3eiUkMDA2FWFVOB7

QYn2kwdjuJ9OKGCX09YISU7WkK9BIVyGOYy7SFq7r7Dc25a3BN+w3zD5ZNjOSRPbym7b0S2JgX40

a1cVkrBVBtkiXIVQD0yNx3cBwbY/mrXIeW25L8dqzx4igzoVmwmwWDYKdoW3NVyapr8Cz6SWh1j4

tzn4K2BnBP6UjoI/9P7cFFqA3++UmP+tEN8ReSMM77SHOzm07SWZa2kVaHpFFWY24kMqoYBuhAc9

yFHgla+AXpU8apBRVPePW2TQs+a1OFJQ2ZC3eX6g+bMkCsvKzTl3Z1WgdOeYf0tHQC9wpQhzSOfQ

q/X2GU8K+2mQQbLLCknQvlfTX0UaN9x7A3cFfQa7E3ibnEV5TSdNMuiFDWG5LtGOAm+f5dDKbntO

l+cn6p1Jk9eShPvZQ4Xw42I0StLzh5xw8WkDG2GXp6yEgv2Ii8t9yjF9mzL1cX9XGarl/kN08wAi

ZcxrcRm6fzRMofuB6hT+I6yCPoa1TSSWP8p1tOsKSdB0iwpWOaYvoBvAFH4NlNLSprdvAyygn2/q

kFZhfk7QV0abMiuEKTx1FDTqZpbrFE/lEjLlLNCtE1okxfLX5JrIocvZ1pErbIaiDOaTNWQSHez6

lNWgoBtFCrtdWUBXWLEQ94ZJ1zbaZpifu+Q+R2HyIFvO7A36QPc+h56KZT3LUJiXE02PJZrtxTPY

F07qaVPMv1Fj8uagvKhzqtdFncIip4kMum4kdDsw9rBxxLiELrOiSi9hf8a63IKJc8Hsw3Lx5tc8

n0r+ihkVeOiXt5xJyl7/H0gm2AzGSYAwL+s7rQ2RBdj3x7pQX2hR6E+GwOqHnk0jWUfeCsOB2j63

kOY6o4lEIgwpwhZnaGtkVgtXiEQiwQjMFUl43HeMVWWkcIpIJBIEjYr1Ua7NMYF4AV4ZKUhEIpEg

mhSLPI1ocUxWgRabSFnfNdxzgUgkEgQ3OnYJpKgCkUgkGIH+lDJFJBLpDI2UtH3RZWRMEYlEekVA

OwU02YiczSgwIBJEIncPWsCR0A4vI6z+RWPy0MpxPz5AFolEIpHIHeA3xHUJZ/3GWR8AAAAASUVO

RK5CYII=



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj

Content-Type: image/png;

name="docInvite-white.png"

Content-Transfer-Encoding: base64

Content-Disposition: inline;

filename="docInvite-white.png"

Content-ID: <49F457A69BBF5016121F@HQ>



iVBORw0KGgoAAAANSUhEUgAAAJYAAACWCAYAAAA8AXHiAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJ

bWFnZVJlYWR5ccllPAAACZ1JREFUeNrsnY1xozoQx21PCqCDo4PQQXgVHNeBS6CDcwfMVcB1YF8F

TiqwXYGdCnAHeehOvKfoJMyXxGr574yGjMcx0uqn3dUipKfVQuXj4yOuL6IkdYnq8iyvkfysj5zr

cpflIq/is9t6vb4tUb/rBUEkYHmR1wYmH9JA9iav5yXAtmYKkoAmrctXeY2JVVGA9VqXX+Jag3YH

WLRhyiRM2QCLIjr7XX722vP2qbx+0dxrVzlIyA5cIFszAGrbA6azLBfFLd0dgt643Wfl706Q1fX6

uYL4j5nqUtSl+miXq/xeJjt6dqsq61LIurVJJb8Xo8fdd0xal+ODDjnVJQ+hQ+QAyWWd20S0OQUB

/oG6hgJTB8iuAGx+oEqOipbtLgHY9IpNWoASsceOQszkKSbbtcSSQkcJiOmmyGLpQA0ArFiiXroq

L7MobrFA9QRMfJaBpM/K2mMkTmbZ94vXWYuVQuwwLhZdpvVqGXFCITmQ6a3P3DJAl2PxZb7mBBPu

LaQ4sc/ey/xMBSvl3XpVbPNe4mGxZTQhlnITe5m8wpZbQ0tL1hyuz61rNOqdM1RwfX5dIx+45Ig5

YRpMoi9MaZ1TcB6jBSrEU/PGXeHCBagAl6vKn4I3ufyD+r/6KLRAHVCFA1cZClQVoCIPV0UaLkPy

EzFVuDHXlkrlUkDFDq5s7krF5CoFGdKPmcE4xJQCwDwwhZYfYUgl6xo71EVOYuJlWE9VAiovgCUe

dVLMbTqDSisECpVzN2XxQpmvTtGnqUEF6xaoIsL1TQ0L+EqH90sM/Rv5aOg+1LjKZqkCqbuq98rx

vfR4a+/bBe5DhyogsFKfdTYYkMzVjaJZTKSHmCqQNkSewfLT34ZZYM4BqlDAkm3xWmeDSyymvkGi

v/fHafYHsFrvqb+3mITx4wRSCgBrBqNieBZYcIIKYA0Kg9KprRX5gH1I8hNg9Q7kj1Nbqx03qABW

53vvJrNaIVmrMY9phnTsFBIYWL2s1qbNWq3+379cyA+qe5DLRxzbFcSZyL7/oXyUDrJaoVirKR4o

wxV6irXkAj7ysdVUqxQA1qhYKx4zvYy4QgWwBlmtYeknzdyVnKECWKP1X3X9p+3kyTDCUAGsSdJQ

2y7/pC6XuHKHyvXaJo5gybpcOy+fMvjPnDlUQa3VJwZW3jkON7jBmDlU1UdA+3MSAyvu7A41N3ha

AFTJ0I5dWubdUp/TQ3dI1Q1SekcPYA1wh4b17DFBsBa9yQhBsGLbunj1WeFX5e8bxZPWOR7KHbJI

Rm4mhlSw1HzVAWqDdJSDiaFNY9JWf05fb+QN+oJ0FJWVuAmhGoulz45eoS9IR9FZSWxgnRHLQHrG

vWcbWC8qWFAXpKeozLzYLNYFeoL0lItusZ5ksBVxtFjUVy7UbmTN0GKJRHu80WaDorEI3CF9B4jO

TPykucE7swav0e3e5K54vmTD1Q1C5nWHAqxn5YMb9AMZKCo7z7rFeod+IAPlXbdYOJYEMrX8BksN

3jEjhAwVlZ1kA31AXAjAgjiRJ86NQ+YdFgsCixWOIPNOx2JhHRbECVjIaUEQY0EAFgRgQSAAC7L6

7/U9cmCp62hSdFNwUIltmE4EjqFR2TmLPNadsdJZZ961bcjFLtf/1D9JYbHmfaOB9QU2IJhBk68+

720fScu1nalKKjt3YbHEqzvNLiExJ+Uzz7zbdisWWzSJtv/0XB+VnYtusRLYAhZSzmC5Et0VnjVz

CgFcfd1ypLFzFmDdtC9hZkgzptoShkv3dLeN3DwL7pA+VEN3dy49bPv5yQ0KppoEqeoOn9GVpKDa

jYBqJY3Gq+Nqqsz8ZqkB6w0WiyRUAqjvI6HykdtSmXlTG5BR3UQ2xKNJpoLK93bjQwN30wa3TwZX

KEQE8AcGnRNk5n2Cgz19WaqGlZXRFRp2v32BI5rV/Y2dyfl8tKOy8vdu25rpvRJS9GJc4YSncGw9

1vnaei5RCAcIMAYq0o4PGRNXeYOr7QCBtiAsB1hBQSUO2Ep8wtX5BDCihzSxBWtKqJTf9AZXp0Oa

5BfJHSvHFSwXUGku6uQSrr7HypFzhxzBcgmV5fcrB23Ie+U+qR3dyw0s6aquEwTpXaFysmy519G9

FneYAqxJoapcZdQtUEUO2pEOSm9ojS8BFqBqybdVff6xoPLskANYE8VUrc/+tM52CZUehxdjIv4d

wAJU8l67UZmD+h+OWsMigLV4qCLNnR+nCNB2AMs7VKc2i+ATKou1Sof+0OxWK0SwJoQq6ghV6QGq

8daKktUKDaw5oPLUrt2kaai5rZbWmARQzQLVdNaqxWoVnjur6pXhBVQu2lY4SZprVsur5TAsfttT

e/fRB1RaB/uEKtHqeQzjx7vl1MZmrKlL5xmd71fnnRsVgznMPY+aaulQzWCJc+dhkCGA8xrIS8tV

MgOMMlSj+nvd82ZiTbMaQB/W6/W3GRotkoYxAf2PCQnEWzTibZo7UbBEP6tr2L/VdT04vSHFtfEz

KH7L0VJZXODex01NJjJZIFhHplAls4U8hlfFSCvLUbzHESpT2iTzXQl9llguCKyCG1SWnGFBhe58

IWBVDKHKydTZkrzMmEO1ZQhVZlgDFlOsVMIYrK6Pbiofy1kcBOuzv0DTNopZwmV4tGWSq3QrUSDt

qebaUGRo4Fdxmyk+2A2G3MPxnmkjuhMwg+LZpCEsKYZKzhDjwNpimniV1Ct94giXlhA9kXMZ/QbI

X30U6mgIOuZSFjseQ94H3xJThTPwucHV7D3FYOJRBe9NWuBineci2hcZC6g6zKRydLc3/ecG/Zdc

GmeCq1zSg+uZPEbJFiotTjE97sBJGG7iqdOcuynPMbuqDHEXXOO0rs+k45R7w2PLaNrDNY52ffu+

+z9wVEJhyWTDek1jpT6kjqMlKiSzKOSI2KtzLHW0DNBs6cqxmfDljrjhFh8hRQ/rVcmdTiLo6DdQ

uxY9Ifk8YCQuFrAHQMGyTxA7LAqwDkAhFh2o2PTB+3slx/yMbHfbosIj+7wUEcCa5cBxwG2MZRuu

AIoeYE1CMAjIFJgevaABoDx2SNHh/b6r/F5GISaTMVMm6/ToPJ0glz03smYA2ba+fF193hnFJmdZ

Ls3frnZ7kSAnsjwrfz8SsaPLr7peP0Pul+DB0joy6wFZI3cJ2a0u7/Kz15bvmixf46a+rP5sr5RY

vtcK0+rPtlB3Dv3BBiwDZKmELF3R2EtLlZuEV8D0ygUm9mCZYjLFFb0MsChjpLGIb4r7vXHX+SLA

aoFNdVvP8hp1jIX02O0uy0V1r0uAyCT/CjAA+PnMSsvFmLwAAAAASUVORK5CYII=



--sPsIrZBl3ibU=_TD9YDLM5QXymRPFeKEQj--