Cryptocurrency phish from microsoft outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 09 Oct 2024 09:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1syZ3g-00000000FZh-45nG

for dave@doctor.nl2k.ab.ca;

Wed, 09 Oct 2024 09:57:04 -0600

Resent-From: The Doctor

Resent-Date: Wed, 9 Oct 2024 09:57:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.ramly.com.my ([219.93.101.253]:52878 helo=zimbra.ramly.com.my)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1syYe3-00000000Bj8-12lL

for doctor@nl2k.ab.ca;

Wed, 09 Oct 2024 09:30:43 -0600

Received: from localhost (localhost [127.0.0.1])

by zimbra.ramly.com.my (Postfix) with ESMTP id B31D3FFDD7B3

for ; Wed, 9 Oct 2024 23:14:24 +0800 (+08)

Received: from zimbra.ramly.com.my ([127.0.0.1])

by localhost (zimbra.ramly.com.my [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id fNN4Tx1DA97S for ;

Wed, 9 Oct 2024 23:14:24 +0800 (+08)

Received: from localhost (localhost [127.0.0.1])

by zimbra.ramly.com.my (Postfix) with ESMTP id 6BEF7FFDD7A3

for ; Wed, 9 Oct 2024 23:14:23 +0800 (+08)

X-Virus-Scanned: amavisd-new at ramly.com.my

Received: from zimbra.ramly.com.my ([127.0.0.1])

by localhost (zimbra.ramly.com.my [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id TefWzGvnbMU5 for ;

Wed, 9 Oct 2024 23:14:23 +0800 (+08)

Received: from YankyHQ (unknown [20.55.110.231])

by zimbra.ramly.com.my (Postfix) with ESMTPSA id 9C0FBFFCF01D

for ; Wed, 9 Oct 2024 23:14:21 +0800 (+08)

From: "Kathryn Dalli"

Subject: Secure: Your Ethereum DeFi Login Details

To:

Content-Type: multipart/alternative; boundary="3LmG3GUepHLOQtLYsAnizbwf=_bZsdzeoL"

MIME-Version: 1.0

Date: Wed, 9 Oct 2024 15:14:20 +0000

Message-Id: <09192024101415B28B84C6BA$084D6DBF61@ramly.com.my>

X-Spam_score: 13.6

X-Spam_score_int: 136

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Mike Morlock, As per your request, $300,000 has been successfully

invested into a DeFi Layer project through Ethereum (ETH). Below are the

details you’ll need to access your account: Username: mmorlock Password:

Password1 (Change it) Website URL: www.defixlayer.com



Content analysis details: (13.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.55.110.231 listed in will-spam-for-food.eu.org]

[20.55.110.231 listed in will-spam-for-food.eu.org]

[20.55.110.231 listed in will-spam-for-food.eu.org]

[20.55.110.231 listed in will-spam-for-food.eu.org]

[20.55.110.231 listed in will-spam-for-food.eu.org]

[20.55.110.231 listed in will-spam-for-food.eu.org]

[20.55.110.231 listed in will-spam-for-food.eu.org]

[20.55.110.231 listed in will-spam-for-food.eu.org]

[219.93.101.253 listed in will-spam-for-food.eu.org]

[219.93.101.253 listed in will-spam-for-food.eu.org]

[219.93.101.253 listed in will-spam-for-food.eu.org]

[219.93.101.253 listed in will-spam-for-food.eu.org]

[219.93.101.253 listed in will-spam-for-food.eu.org]

[219.93.101.253 listed in will-spam-for-food.eu.org]

[219.93.101.253 listed in will-spam-for-food.eu.org]

[219.93.101.253 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[219.93.101.253 listed in dnsbl.ahbl.org]

[219.93.101.253 listed in dnsbl.ahbl.org]

[219.93.101.253 listed in dnsbl.ahbl.org]

[219.93.101.253 listed in dnsbl.ahbl.org]

[20.55.110.231 listed in dnsbl.ahbl.org]

[20.55.110.231 listed in dnsbl.ahbl.org]

[20.55.110.231 listed in dnsbl.ahbl.org]

[20.55.110.231 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[219.93.101.253 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[219.93.101.253 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[219.93.101.253 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[219.93.101.253 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: defixlayer.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: defixlayer.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: www.defixlayer.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: defixlayer.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Secure: Your Ethereum DeFi Login Details



This is a multi-part message in MIME format



--3LmG3GUepHLOQtLYsAnizbwf=_bZsdzeoL

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Hi Mike Morlock,



As per your request, $300,000 has been successfully invested into a De=

Fi Layer project through Ethereum (ETH). Below are the details you=E2=80=

=99ll need to access your account:



Username: mmorlock

Password: Password1 (Change it)

Website URL: www.defixlayer.com



Please visit the provided website and connect your wallet to begin tra=

cking or withdrawing your funds as they grow in the DeFi project.



For security, delete this email after saving your login details



Best regards,

Kathryn Dalli, Esq.

Portfolio Manager

Twomey, Latham, Shea, Kelley, Dubin & Quartararo LLP

33 West Second Street, P.O. Box 9398, Riverhead, NY 11901

O: (631) 727-2108 Ext. 228



--3LmG3GUepHLOQtLYsAnizbwf=_bZsdzeoL

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable








8">


le=3D1"> <=

title>Secure: Your Ethereum DeFi Login Details



Hi Mi=

ke Morlock,

As per your request, $300,000 has been successfully =

invested into a DeFi Layer project through Ethereum (ETH). Below are t=

he details you=E2=80=99ll need to access your account:

Username:=

  mmorlock
Password:  Password1<=

/STRONG> (Change it)
Website URL:  www.defixlayer=

=2Ecom


Please visit the provided website and connec=

t your wallet to begin tracking or withdrawing your funds as they grow=

in the DeFi project.


#ff0000>For security, delete this email after saving your login detail=

s

Best regards,
Kathryn Dalli, Esq.
>Portfolio Manager
Twomey, Latham, Shea, Kelley, Dubin & Quarta=

raro LLP
33 West Second Street, P.O. Box 9398, Riverhead, NY 11901<=

BR>O: (631) 727-2108 Ext. 228







--3LmG3GUepHLOQtLYsAnizbwf=_bZsdzeoL--

Web / SEO/ App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 09 Oct 2024 09:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1syZ3q-00000000Fa2-16p7

for dave@doctor.nl2k.ab.ca;

Wed, 09 Oct 2024 09:57:14 -0600

Resent-From: The Doctor

Resent-Date: Wed, 9 Oct 2024 09:57:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2050.outbound.protection.outlook.com ([40.92.52.50]:4832 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1syYUv-0000000092B-3ynV

for sales@nk.ca;

Wed, 09 Oct 2024 09:21:17 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=cclU7iOYr/SSj53XNXSvly4yF4ihfkqYLfQsPspLO1xTocfTi4Pt5aE2pV3j8sBIu9HYohBnLYe7dsANXDsl6++miso3U8CEfuaQn39jt9yyYZwp+AjDqNY2ILV2WYNV5K+BZ8G8d9960MDEfuvG4uzZh+h7R6W3gw4rPRauVWAzNcLjpd+7qKFBKiuvUN+renTdtiom9j6zLx9O8EJ2Pm5DkndcFtzyIxkUd7z3F73zMi3S54cvlgeYtk7+TJe6M1DkXQz8yqoYyCW/C2Wch4RMBSOhmrS6/MxC8sqjwfZUqEplJWv6btxFwPoGWHo+781AWpnNKHfZw28ozUN5xw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=x5bRbolyBdidAI537Ti77of1pJqh5WUFsKkhIlLbAHM=;

b=cLyCMzIdbgQpAOwo81Xl8YzykcMkWP9zGp+BjPITMqaYs0rvjqIWd6XA8GMfT9hF42tGXJn2/hxQ/7RHShEzIJLPkZ4kij4vWMlcfx5ZmmvN9uSAiS0DeTIEKvjOoeqAU/QpV5hCLT+b9xm9h92jVi6zoEyKOgsaGQyOYa/tnU5o/cJtTfsLev4yYTTpUgy/RP+rk5Vx6nt4xEB4vAjH8JaoBWI7e36wViLj880xbsvLIGsg6iaizUCKyIoxQP6EqlhdGVH/21ZpEBth707koglpvKTeAO2JENPr40sj/1SUmii0fMgyd7neObmdrxy7GQ4NWZAk7+wQhrN38C7vpg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=x5bRbolyBdidAI537Ti77of1pJqh5WUFsKkhIlLbAHM=;

b=O5C9WPSN3q3HA7GJ4/olQhC4AwEtSWAlYfb8X5mhbKtz4Kkf8AU241aTjyVSWe+HB2QZzCw9aMAeBiS86hoy2iUWIc+RoOMnsmO6jlc6NWZ3XXJhHPZa7EJAq34LnLVRgFGEeU6oMURexfgJyHQWzT9yK2CIR+r4cUJaKkhmhiN6bX6wC8InT2m8/v1rvr2MDv6tqcamOwPwJvVF3EOxNxNqNFuhmAXYgpl6GGGiuYlBfcnmNBhKWlmmwUYlKDUNAlvxSo/1paiZcW6uIlQabpdKICvLIWalj68IekGHKnY6kzWJiuo7HI200jmVFcjBZOSWOL9L0x9/TlvDIovh6Q==

Received: from SI2PR04MB5942.apcprd04.prod.outlook.com (2603:1096:4:1ed::5) by

TY0PR04MB5886.apcprd04.prod.outlook.com (2603:1096:400:213::6) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.8048.16; Wed, 9 Oct 2024 15:18:37 +0000

Received: from SI2PR04MB5942.apcprd04.prod.outlook.com

([fe80::b974:8fb1:2f7a:7081]) by SI2PR04MB5942.apcprd04.prod.outlook.com

([fe80::b974:8fb1:2f7a:7081%4]) with mapi id 15.20.8048.013; Wed, 9 Oct 2024

15:18:37 +0000

From: chaos curran

To: chaos curran

Subject: Re: yes / sure..

Thread-Topic: yes / sure..

Thread-Index: AQHbGl3TQFAh8OvfU0GcVGlPe2aPiw==

Date: Wed, 9 Oct 2024 15:18:37 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI2PR04MB5942:EE_|TY0PR04MB5886:EE_

x-ms-office365-filtering-correlation-id: f4b2dda5-8f1f-4ef7-7138-08dce875a5db

x-microsoft-antispam:

BCL:0;ARA:14566002|8060799006|15080799006|15030799003|19110799003|461199028|8062599003|56899033|102099032|3412199025|440099028|1710799026;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?M9nSxsFxtMoXUbyrSDf+WLI5/xu7UpcJeRu8cifAEfHGP4P77PAL+xWVAU?=

=?iso-8859-1?Q?auDO62/E1Hzy28Vr5p0WCgzxyFlW+Yf3l42Df9OvfKRukESgvYimFMm8lL?=

=?iso-8859-1?Q?o84LAGUyoqrF8u/HqOXhJ2uh3wVIYfaAdCeU6pPCzSWLvIUqog/1qAvvtX?=

=?iso-8859-1?Q?B3kqkld7ohmvYnIS2OKPBYQUb1VUxyWIrUW57269UbA3SI+ENdA/sQlFy3?=

=?iso-8859-1?Q?mi6Z3bxgSZEcwQdIbCZk7dS44eIhdVVtN2/CUlIaHIuWUmJU3+abYKGPxb?=

=?iso-8859-1?Q?eVNRo8pVbs1f4ifeANcDoOlhWshZ2dLhX9Tb2ygchSD3MWVzJNghhdVvL6?=

=?iso-8859-1?Q?/DwX045OJCbs6d5DC60L9wgcEqcoBZdCX70GJMdVUgPe7Npz3pzQcMN828?=

=?iso-8859-1?Q?UcynSluWEerjs/pb18LJXlgEtQCQldhNm6ZVXKowMpwW73DzBKBBrjn6oR?=

=?iso-8859-1?Q?yaFYt2qSGtYo4qRmCu3NE6E23RmzIMvOIo3CJ9a1S+zkSDC3c4gjJk0/Qd?=

=?iso-8859-1?Q?dEGk5niWT469TSB/GL0rYkjycOjVWpDw/cVounUemDBaFkq+Zt0yzvQq7T?=

=?iso-8859-1?Q?sf1OokN1OeP5SKoiX2DV2tlNq2d59U3tE39niznBYGwf5gyD1zVY11CnXp?=

=?iso-8859-1?Q?M1T4xA8RVueMixLNZ/DoHqzbGpb3nGi6mJDTJQ9ECH2T8euLdJPxDNHvL6?=

=?iso-8859-1?Q?AcRWIqoSm2wakn3TvXtpgZL5MijWuS0FcR9rsqlIpQ1cKLv1Sv4dx1gUFz?=

=?iso-8859-1?Q?+MCV9C/v/c+4UAtvIngbMkG74V9lWB+wO7DlZaD08I2fFbwDAx/Moc/Nv1?=

=?iso-8859-1?Q?mCH7BIM0O4e8mlg/hcndGfujqnjg71Vet+o1LTL5707rs/q19nEIScDpca?=

=?iso-8859-1?Q?nfFBWct28fpuAFYca4RbYbR5zqOjgxQ36opRVxk5lc22doFhihFgqTfds1?=

=?iso-8859-1?Q?Pr9UwsDBgkrnOXthhuCwu/yOHm+NtAULL7AcrSKvZ9vmHpRK/bMX13UTwH?=

=?iso-8859-1?Q?KuS63S8T+rPdDKnQrCvoPJiYQyrODe7yjtqMrgSpDqu964k2jPxgXalVn9?=

=?iso-8859-1?Q?fxc4UEwGe0MVyyWtIqqhVNjIESDdE+IhQ4t6Cta2JgC+gtgUn44t+1M8X9?=

=?iso-8859-1?Q?pNaPCkB7tQTWs0fWyiBNty1nHO2YrrzkFKIK0elxtm9ziG30d/Vx1ICoAD?=

=?iso-8859-1?Q?NrOiIBNXbDilZMpckcsONUtwl847nSawbh/J1fsCh0qUmxYFpUswlJ7EqO?=

=?iso-8859-1?Q?SfGnbOvcf7Uaa2HSTTWtkV1kQ5Rr3tChSmO0lJ9ig=3D?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR04MB59429CA479B165CC72C4BD63B37F2SI2PR04MB5942apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR04MB5942.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: f4b2dda5-8f1f-4ef7-7138-08dce875a5db

X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Oct 2024 15:18:37.1077

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY0PR04MB5886



--_000_SI2PR04MB59429CA479B165CC72C4BD63B37F2SI2PR04MB5942apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hey there!



I am still waiting for your reply



May I send you report of those Errors?



You're welcome!



From: chaos curran



Sent: August 8, 2024 5:51 PM

Subject: Re: price & screenshot..$@



Hey,



I was browsing through your website and noticed a few errors along the way.



Just wanted to check if you're aware of them and if you'd like me to send o=

ver some screenshots for reference it might help you fix the issues quicker=

.



I would like to send you a audit report showing you 3 or 4 things that can =

help you improve your Google rankings dramatically.



Looking forward to hearing from you.



Best Regards,







--_000_SI2PR04MB59429CA479B165CC72C4BD63B37F2SI2PR04MB5942apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hey there!



Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

I am still waiting for your reply



Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

May I send you report of those Errors?



Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

You're welcome!



Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

From: chaos curran



Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

Sent: August 8, 2024 5:51 PM



Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

Subject: Re: price & screenshot..$@



Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

Hey,



Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

I was browsing through your website and noticed a few errors along the way.=




Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

Just wanted to check if you're aware of them and if you'd like me to sen=

d over some screenshots for reference it might help you fix the is=

sues quicker.



Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

I would like to send you a audit report showing you 3 or 4 things that can =

help you improve your Google rankings dramatically.



Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

Looking forward to hearing from you.



Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">







Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-s=

erif; font-size: 12pt; color: rgb(0, 0, 0);">

Best Regards,



FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=

0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_SI2PR04MB59429CA479B165CC72C4BD63B37F2SI2PR04MB5942apcp_--

docusign phish from cogentco/mundo-r

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 09 Oct 2024 09:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1syZ3M-00000000FYR-16Hp

for dave@doctor.nl2k.ab.ca;

Wed, 09 Oct 2024 09:56:44 -0600

Resent-From: The Doctor

Resent-Date: Wed, 9 Oct 2024 09:56:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.26.7.22] (port=61390 helo=22.7.26.77.dynamic.reverse-mundo-r.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1syYBe-0000000088x-2Dy4

for sales@nk.ca;

Wed, 09 Oct 2024 09:01:20 -0600

From: "Docusign Via Docusign"

To: sales@nk.ca

Subject: Review Document : Kindly Sign : filename PaymentInstruction-EFT - 9/10/2024 17:03:01 Contact - sales@nk.ca

Date: 9 Oct 2024 17:03:01 +0200

Message-ID: <20241009170301.61E6584EEA538867@notification.intuit.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_625EEA0D.F6B1417F"

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your document has been completed. VIEW COMPLETED DOCUMENTS

sales@nk.ca All parties have completed documents on ( 9/10/2024 17:03:01

) that requires your signature.



Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.26.7.22 listed in dnsbl.ahbl.org]

[77.26.7.22 listed in dnsbl.ahbl.org]

[77.26.7.22 listed in dnsbl.ahbl.org]

[77.26.7.22 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.26.7.22 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.26.7.22 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.26.7.22 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.26.7.22 listed in dnsbl.ahbl.org]

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=quickbooks%40notification.intuit.com;ip=77.26.7.22;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or

Generic rPTR

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

3.9 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr

2)

1.0 FROM_MISSP_SPF_FAIL No description available.

Subject: {SPAM?} Review Document : Kindly Sign : filename PaymentInstruction-EFT - 9/10/2024 17:03:01 Contact - sales@nk.ca





------=_NextPart_000_0012_625EEA0D.F6B1417F

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable












form-origin: left top; color: rgb(36, 36, 36); text-transform: none; letter=

-spacing: normal; font-family: Helvetica, Arial, "Sans Serif", serif, Emoji=

Font; font-size: 15px; font-style: normal; font-weight: 400; word-spacing: =

0px; white-space: normal; orphans: 2; widows: 2; font-stretch: inherit; tra=

nsform: scale(0.884259); font-feature-settings: inherit; background-color: =

rgb(234, 234, 234); font-variant-ligatures: normal;=20

font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east=

-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-optical-sizing: inherit; font-kerning: inherit; font-variation=

-settings: inherit; -webkit-text-stroke-width: 0px; text-decoration-thickne=

ss: initial; text-decoration-style: initial; text-decoration-color: initial=

;' border=3D"0" cellspacing=3D"0" cellpadding=3D"0" min-scale=3D"0.88425925=

92592593">










or: rgb(255, 255, 255);">






>






: rgb(255, 255, 255); background-color: rgb(13, 66, 108);" border=3D"0" cel=

lspacing=3D"0" cellpadding=3D"0">













=






width: 580px; text-align: center; color: rgb(255, 255, 255); font-family: H=

elvetica, Arial, "Sans Serif"; font-size: 16px; white-space: normal !import=

ant; background-color: rgb(13, 66, 108);'>


0px currentColor; border-image: none; width: 75px; height: 75px; vertical-=

align: baseline;" alt=3D"" src=3D"cid:docComplete-white.png" data-imagetype=

=3D"External">


cellpadding=3D"0">






t-align: center; color: rgb(255, 255, 255); padding-top: 24px; font-family:=

Helvetica, Arial, "Sans Serif"; font-size: 16px; white-space: normal !impo=

rtant;'>Your document has been completed.



cellpadding=3D"0">






able>

tant;">


mage: none; vertical-align: baseline;">








solid rgb(255, 255, 255); border-image: none; height: 44px; text-align: ce=

nter; color: rgb(255, 255, 255); font-family: Helvetica, Arial, "Sans Serif=

"; font-size: 14px; font-weight: bold; text-decoration: none; display: bloc=

k; white-space: normal !important; background-color: rgb(13, 66, 108);'>


r-image: none; text-align: center; color: rgb(255, 255, 255); font-family: =

Helvetica, Arial, "Sans Serif"; font-size: 14px; font-weight: bold; text-de=

coration: none; vertical-align: baseline; display: inline-block; cursor: po=

inter; font-stretch: inherit; font-feature-settings: inherit; background-co=

lor: rgb(13, 66, 108); font-optical-sizing: inherit; font-kerning: inherit;=

font-variation-settings: inherit;'=20

href=3D"https://www.bing.com/ck/a?!&&p=3D4ed30224ac809bc0JmltdHM9MTcyMzQyMD=

gwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0M=

Q&ptn=3D3&ver=3D2&hsh=3D3&fclid=3D364f65e8-e56c-619d-1257-713ee42a6012&u=3D=

a1aHR0cDovL3d3dy40NDQzMTcuY29tLw#aHR0cHM6Ly9HTi5yZXNjaW5kcS5jb20vd3F0eVpBRl=

p6RjNoWGdzb2dib0tnLw=3D=3D" target=3D"_blank" rel=3D"noopener noreferrer" d=

ata-linkindex=3D"0" data-auth=3D"NotApplicable">


image: none; line-height: 44px; font-family: inherit; vertical-align: basel=

ine; font-stretch: inherit; font-feature-settings: inherit; font-optical-si=

zing: inherit; font-kerning: inherit; font-variation-settings: inherit;">


MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5=

zaWQ9NTE0MQ&ptn=3D3&ver=3D2&hsh=3D3&fclid=3D364f65e8-e56c-619d-1257-713ee42=

a6012&u=3Da1aHR0cDovL3d3dy40NDQzMTcuY29tLw#aHR0cHM6Ly9HTi5yZXNjaW5kcS5jb20v=

d3F0eVpBRlp6RjNoWGdzb2dib0tnLw=3D=3D">
!&&p=3D4ed30224ac809bc0JmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYx=

OWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MQ&ptn=3D3&ver=3D2&hsh=3D3&fclid=3D=

364f65e8-e56c-619d-1257-713ee42a6012&u=3Da1aHR0cDovL3d3dy40NDQzMTcuY29tLw#a=

HR0cHM6Ly9HTi5yZXNjaW5kcS5jb20vd3F0eVpBRlp6RjNoWGdzb2dib0tnLw=3D=3D">VIEW C=

OMPLETED DOCUMENTS

etica, Arial, "Sans Serif"; font-size: 16px; white-space: normal !important=

; background-color: white;'>


0">








mage: none; color: rgb(51, 51, 51); line-height: 18px; font-family: Helveti=

ca, Arial, "Sans Serif", serif, EmojiFont; font-size: 15px; font-weight: bo=

ld; vertical-align: baseline; font-stretch: inherit; font-feature-settings:=

inherit; font-optical-sizing: inherit; font-kerning: inherit; font-variati=

on-settings: inherit;'>sales@nk.ca



ca, Arial, "Sans Serif"; font-size: 15px;'>All parties have completed docum=

ents on (  9/10/2024 17:03:01  ) that requires your signatur=

e.


: Helvetica, Arial, "Sans Serif"; font-size: 11px; white-space: normal !imp=

ortant; background-color: rgb(255, 255, 255);'>










ca, Arial, "Sans Serif"; font-size: 11px; vertical-align: top; white-space:=

normal !important;'>


or; border-image: none; color: rgb(102, 102, 102); font-family: Helvetica, =

Arial, "Sans Serif", serif, EmojiFont; font-size: 11px; vertical-align: bas=

eline; font-stretch: inherit; font-feature-settings: inherit; font-optical-=

sizing: inherit; font-kerning: inherit; font-variation-settings: inherit;'>=

Powered by 
argin: 0px; padding: 0px; border: currentColor; border-image: none; vertica=

l-align: baseline;" alt=3D"DocuSign" src=3D"cid:c3e45dffbc8719ee4c718c1d606=

d2948.png" data-imagetype=3D"External">

round-color: rgb(234, 234, 234);">


etica, Arial, "Sans Serif"; font-size: 13px; margin-bottom: 1em;'>
=3D"heading" aria-level=3D"3">Do Not Share This Email

"true">This email contains a secure link to 
=3D"marko31iqkukx" style=3D"margin: 0px; padding: 0px; border: 0px currentC=

olor; border-image: none; vertical-align: baseline;" data-ogsb=3D"" data-og=

sc=3D"" data-ogab=3D"" data-ogac=3D"" data-markjs=3D"true">DocuSign

=2E Please do not share this email, link, or access code with others.


td>


------=_NextPart_000_0012_625EEA0D.F6B1417F

Content-Type: image/png; name="docComplete-white.png"

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline; filename="docComplete-white.png"



iVBORw0KGgoAAAANSUhEUgAAAJYAAACWCAYAAAA8AXHiAAAAGXRFWHRTb2Z0d2FyZQBBZG9i

ZSBJbWFnZVJlYWR5ccllPAAACQRJREFUeNrsnY+RmzoQxs3NFUAHoQPTwfEqCCU4HVCCO6AE

0oGTCnypwL4K7KsAd+AHeSKj6AkQIMSu9O2Mhhuf/0irH98uQkjRLlB7Pp9Jc2hL2pS4KXtx

jMVrU+zalIcoH+LYvnaPougeon+jgCBqYXkTxw4mF9ZB9kscryHAFnkKUgtN1pSv4pgQq2IL

1ntTfrbHBrQHwKINUy5gymcoStvZn+K194k/n4njFyW8mtoPAdkPXyCLPADqMAGmqygfUlh6

rAh6F3b30t9GkDX1+r6Duc+ZmlI2pX4O2028LxcdvbmqirqUom5DVov3Jejx9Tsma8p5pEMu

TSk4dIg4QQpR5yFr25yBAPdA3bjAZADZDYBtD1Tlo6NFuysAZt+x6QBQbe5xpJAzOcrJjgO5

ZOujFMSYObIMHagZgJUh+sXUeXmP44IFaiJg7Ws5SPrbWSecidaU/RS8zwZUCrnDslw0TPUa

OONahxRAZrI/i54TNBzFF+M1F0i4s5Ti4v3ovRifqaFSztWr9nbcq71Z3HM2IZdaJ/fSRYWD

bw2tekbNEfrWDY1av/sMFUKf29DoD1zijLngMphEX+iGdS7sIsYAVMints27+MIFqADXWpW/

sJdc/5P6//URt0QdUPGBq+ICVQ2oyMNVk4ZLM/iJnIpvznWgUrkMUHkHV751pRJylYLN6cdc

Iw4JpQSwYObQ6snDalHXZEVfFCQuvDTzqSpA5QSw1KFPyq2lk9WwAlOoVg9TPVEod9Up6mUq

q2S9B6qYcH0zzQS+asXfSzX9G7to6IlrXtWnVEzqLvu9Xvm31Hzr5DoEnrhDxQiszGWdNQKS

r/VD8SYS6SCnYtKG2DFYbvpbcxVY+AAVF7BEW5zWWRMSS9s/kKrP/fl09QewBn9TfW4x5fHl

BIYUANYGoqK5F1j6BBXAmpUGZbbVinzCPmfwE2BNTuTPttXq6BtUAMv4t4/WVIuTWi25TTOn

Y20YM7DsqBYntVp67w9gOVQtLmpl44YyQqEj1RIT+Mirla1ZCgBrkWolSy4vY1+hAlizVGve

8JMid5XPUAGsxf6vTT90sD4YRhgqgGXlwu5g8iF5usTNd6jWntvkI1iiLjfj6VOa+Fl4DhWr

ufrEwCqM83BNGEw8h6p+MlqfkxhYiXE4VMLgJQCo0rkdG+IAqaY+l9FwSDUMUnpGD2DNCIea

+ewJQbCCXmSEIFjJ6Lx4JeTc4EyANePqsBp7QwlnAizDOpW9gmQkaXAmfKGvU38KpflnDGcC

LMM6xTpRehH/ly+7r1EUPXYwmIEJVq7SS6kM1psMFtwFm2gyM299ivUBP8Em2oeqWK8i2Yp9

VCzqeVkTRiIPFavNuZJITIs5U22sDMfUuvkG1hJfOD6J/3lVwqBXSbtHisDBHlLkS198DYOw

bcNhC9ZeeuEO/8BmmszOXlWsT/gHNtM+VcXCtiQw2xbvKD840V1t4JYOfV+oD1i84OSCrWEA

C7aKvfoeOijXz+dxNigWDIoFReCrWJiHBVsFLIxpwZBjwQAWDGDBYAALtvvv8T2KYMnzaDJ0

EzuoDs3hZrT42boms3Ntx7EeHjvd65F3AVP3WHu7REL7nd8JNO3xooD1BRrASqnUtRKqDZVL

ZuehLq98JuhATJvR+GLEDhvUTd4X4KgqVgot8MKqDZbATFXFyohPIINiTVcsp+uratZvyHQr

zWQAi2ZORXXxXs3y3En3j5rqXs8AS9txU61cuX6Furx5N0Aqj2XtkaKQgqrNXU4Lv2bt9Thk

Zq5y5Y/UVkuGYv3Zj7leqFYHB/W8aDf0wsJrgMpi4p7L//RyqcgnceMOVY8oJX9yrCiK7ru/

H5F+Q3azaU7VDlQviRrfHN7akVm5C5b+ahCW40b4m1Pn0eW4yW8gAKjIQWW0gQD5LU82rEMM

qEbHr/ov+ohu0rT1BtuVuJyOAdXgMMNp6I3ktpXbEiwl77QOF3OoJm0rRy4cbgVWz3Z21uDi

DNWkMNgTDm8hgjWyR+JiuLhDpbkaPJl8gNRm467BMtx4czZcnkCVzaqP0vAqFLAm7uY6GS4f

oNL4qZ7ywZLKvUNXYM3cItgYLo+gimdPydFk/EefwVq47/QoXL5AJdpyXDRyoEyOr7dSLUdg

XRZ2ei9cnkEVK205z/mSjIJqOQIrXgMun6DqUats7hdtrloOcyyrcHkI1XK1oqRajq8KbcGV

+QSVVbWiolpKY1ImcD09g8qeWg2oVum4UfWkEV7+cJGCqmf4KbP1xWfXyjEwFHBycTdgI7go

QpUqdTzz+HKzMbX66b+Rg8qJqGjksHB81tSAyjlUxeppkCaBc5rIC+WqPASMKlTu+lszL/60

C8RWyrmOhNt7cvpIoOYHC8BFc7EOiyHw5Mq5qkSmgMsbqNLNUh5NSLw8CT2WTxyuilm7cteV

KLk4jBBcFfE2VVsOhg85tgBcbKEqyEShnsHLHHCxg0pNberNH/3rqVQKuNhApRt8zqhU7gC4

tHBxhOpAPfGrQ7pS1MBVMahrzeJE0MB1CRSugtEJwOOqXlPh4OAi3j+Jro+45hrB5VyMcio+

Jz7gAlRbwJWjm533Re4FVCMJfXAj9Bv7v+A2trYUrgpJ/eoRo/IWKqmhh55n8JB3rZNPXbjM

VrXRYN2DnDVCo/XQp/NxFuI4SvdYF0LjstB36okKSUhOKDVOgHrZU6mn8HEcokPyHoeckXsZ

51LnnhM0D905fRIe7hk3X/GRUkxQr1qsdBLDR7+BOg74CYPPM87EYAEbAQrKbiF3CAowA6CQ

i850bDYAWDd6n3na7qEFd8/ej0sRAewmLrkTxm1MRBtuAIoeYN2AIAvIJJjGnvIBUA47pDRY

eeYm3pdTyMlEzpSLOt1G6l6L97FU4cgDyA7N4WtTTC61r6J8dH9HUfRYC6LmkIqyl/4esx9N

+elwT2eAZdCR+QTIOnsIyO5N+RSvvQ+8V6d8XZj60pREADRFIX/D1B7XAh1g2YMsE5BlorMp

2V3A28L07gtM3oOly8mkUPQ2Q1GWWKeIv6Twe/fd50GANQCbHLb24hgb5kJq7vYQ5UMOryFA

pLN/BRgANtnnxKyU/cUAAAAASUVORK5CYII=



------=_NextPart_000_0012_625EEA0D.F6B1417F

Content-Type: image/png; name="c3e45dffbc8719ee4c718c1d606d2948.png"

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline; filename="c3e45dffbc8719ee4c718c1d606d2948.png"



iVBORw0KGgoAAAANSUhEUgAAAKwAAAAyCAYAAADBXTDrAAAACXBIWXMAAAsTAAALEwEAmpwY

AAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAcuSURBVHgB7ZyBOS07EIBz3/cKuB3Q

ASpABagAFaACVIAKUAEqoANUgApQwb79937jy4uZJBucPXs3//flefdsNieZzE4mM9nzq2lx

lcpI+MdVKiOiKmxlVFSFrYyKqrCVUVEVtjIqqsJWRkVV2MqoqApbGRX/ugKOj4971f/9+7db

Wlpya2trrqJzd3fnbm5u3MPDg3t+fu6KsLy87BYXF93m5qbb2Njo5Gm14d8H3GPVHyVNAdxW

UlqhN0dHR83T01NT+cPt7W3TPsi9ZHh6eqq2tbOz86k+7f9NzFRhfaFfXV01U4eHt1SGKGfI

FBR2EB+WZWtra8udnZ25qXJxceFahXWlcP/BwYGbGoNuuvb39zu/a4pY+wB8zvPzc9e6Te7+

/t61FtK1llP1Q1vXYHryawpwyhJlLT2vr69NOwGdG+AM94A6UwJZ9ZEh4PdrMvRdA+RIPb/8

bbL9cYX12d7eVu/Fl5sSmu/aWtbkfZqit5a3mRJFYa1S8LteXl4+LWMsbXt7e2b45e3trQv3

EPbB/+Xf1CXUs7q62i2jfeD+6+tr9/j4+Kk9wkZW+E1bfq260mcf2qeEoSfICT3xXdr3Sf/D

cBgQEtPa5p7Ly8uPMJrU9ccfjpd2qKONTa7Jff5c8TmlNVj/uwd94D5KdsizKcAVWliwlkMr

akAIByviElGHdvBZ35/bntYfrZ4FbpAzVpLWd1ct5VeX79woAf2IyYB26Ev4OeE30OZQ7mGl

iMlVQpqtwWhaH73rC+3x/znMfNNlWQmeSB+ezPX19W5jxv/H4ElmY7KysmLW7dseUYy+CZJc

sLJa/+g/Vu8n2d3d7aITMRlg+Rh/X7iHlcsCuTIH/G11r7OsWGP+stpl0RTgvmBhQbMwobVq

l5CoFbQK92mWKvbkx4o/rlSffWIWVrNeLrC29JfVoI9cUxb2K3Ffl7CwqVXLL4wNGTC+VmF7

JZMGUVhtMv3Ng7VkHh4efigjA6QdTVDcn/o+mQCWfvrOX20X7ivldymsNcaUsjDBsYmNKSz3

ae0yhpOTk64ehTYs5YsprD9PtMFYY0ZC5hFXoI8rNIjCWgOWsIx2zfJx+FwTsD+xmiKi/Bpa

mlTG9p0Km/L3UsqrySOmsNaqpikLstNkmlJY30f150erm7vnCBkkcaD5cIBfpWW/8E9lBxrC

5/ilIeILym41/H4ry9QqstnWd4Lf1lp111o3Ux4W+H34u318bC3CQVJCiyDQH02mKWgvHIs1

P1qkJIfBUrMa4oSHEPKKEYZLgI0DaO1pSimwIWz+rDwfhczTT8FkktXiO/qerOKhy1XaMAwl

J8AsUjIPibXHSb3vYq7OwzJZsfieBYIKJ1oeirA9qT9vsIpgcdslurNUWN4cBUZpU9ZKu56S

gcSlc5nVEcZBFFYLYaCUpQF1q54WSId5VFgfrDyW11dgFNqixGUZ6xnZQRRWW6bnXYmGBAWW

AzGaommrSIocHzIVrx6CmSssgtKCy9ZJ+lyhafU0V6FPmz8BykXw3C8E83NgPJqlTY1HkwP9

iN2Xuj4UM1dYa5OAFdH8JoSW46OFwhW/V/N/U1kVJotVwC99eX9/N6+FbbNBzFWO0pUoPG9h

RWSEeT2rPDOFRUAcOJbduw9WQyZCO8iS8tG066KoHI4J0frgE1pA6yHTHhTBSlFaVj9XQbTl

P7UpBS2SokUZYvM0FzQFOCUQLGnEsJBBImhtZU/CYLOV9rMyPFaQW+oTGNeuW4FrLX0pmTMt

AaG9X8Vn2lglcWC9w5UKplupVTmok0rNWt+LfLhGWjuWYo0lDuSaRiqJ0odB3unShO1jZWX8

CY0dDA/fdyL1qH039cjEoNxMgpUuFeXXFELaoS+U2AuFMkmx1CZKQz+kPQr/jh2AF1IKax0C

zy2TV1gGooEyxgSbuqZZ4z5vpvqlDaB/tBFTtJziTxKp4a+0JcVP0eYcL0Q2OQeLtP7Ng8IO

EtbC5+J9JSu2iI+npfkEaxNGfes+Ypo5vp4Pfh+HywXraKRGqh7+YyzjlkJSu33HhGyQPWEy

rY98FpubwWkKcAWWQPykPodksLQ5lig8yRWDeqllUdqz+mS5BlLk9JPLsCpYvFR7TrFm2ipS

8pq3/x6YLz/tENI8WNhf/Mf1pG+YR14NKQWLKq9dSJhLUrbkqa23Sn+yPf+XWkBCcuTg+Rt7

RSbWJ0JuEgOVCERu37TYqbwi0zfjR1+IkPiQfSNlnHpFRhubdgCpSCeayiTQrK/1CzKg+bnW

nmOWFFnYyvjQLCZgsfHVxdphOYkJh6uo+L5Dn0GoCjshUNjSH97AFSg5I/vd1J/bnBAlUQUg

mjEPygpVYScEy7mEtHI2PIS4CBN+5TfAvpvqEkwY3AN8Vn7cRKILKPLCwkKnrPN45LMqbGVU

VJegMiqqwlZGRVXYyqioClsZFVVhK6OiKmxlVFSFrYyK/wBRt4SRI+1o2gAAAABJRU5ErkJg

gg==



------=_NextPart_000_0012_625EEA0D.F6B1417F--

docusign phish from cogentco

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 09 Oct 2024 09:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1syZ37-00000000FXy-2MUV

for dave@doctor.nl2k.ab.ca;

Wed, 09 Oct 2024 09:56:29 -0600

Resent-From: The Doctor

Resent-Date: Wed, 9 Oct 2024 09:56:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.26.7.22] (port=49469 helo=22.7.26.77.dynamic.reverse-mundo-r.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1syY7e-000000007t0-2eps

for root@nk.ca;

Wed, 09 Oct 2024 08:57:14 -0600

From: "Docusign Via Docusign"

To: root@nk.ca

Subject: Review Document : Kindly sign : fllename Paymentinstruction-EFT - 9/10/2024 16:58:52 Contact - root@nk.ca

Date: 9 Oct 2024 16:58:53 +0200

Message-ID: <20241009165852.AED79DD72DDFC09A@notification.intuit.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_0C733B8B.6088641E"

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your document has been completed. VIEW COMPLETED DOCUMENTS

root@nk.ca All parties have completed documents on ( 9/10/2024 16:58:52 )

that requires your signature.



Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

[77.26.7.22 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.26.7.22 listed in dnsbl.ahbl.org]

[77.26.7.22 listed in dnsbl.ahbl.org]

[77.26.7.22 listed in dnsbl.ahbl.org]

[77.26.7.22 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.26.7.22 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.26.7.22 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.26.7.22 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.26.7.22 listed in dnsbl.ahbl.org]

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=quickbooks%40notification.intuit.com;ip=77.26.7.22;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or

Generic rPTR

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.0 FROM_MISSP_SPF_FAIL No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

3.9 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr

2)

Subject: {SPAM?} Review Document : Kindly sign : fllename Paymentinstruction-EFT - 9/10/2024 16:58:52 Contact - root@nk.ca





------=_NextPart_000_0012_0C733B8B.6088641E

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable












form-origin: left top; color: rgb(36, 36, 36); text-transform: none; letter=

-spacing: normal; font-family: Helvetica, Arial, "Sans Serif", serif, Emoji=

Font; font-size: 15px; font-style: normal; font-weight: 400; word-spacing: =

0px; white-space: normal; orphans: 2; widows: 2; font-stretch: inherit; tra=

nsform: scale(0.884259); font-feature-settings: inherit; background-color: =

rgb(234, 234, 234); font-variant-ligatures: normal;=20

font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east=

-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-optical-sizing: inherit; font-kerning: inherit; font-variation=

-settings: inherit; -webkit-text-stroke-width: 0px; text-decoration-thickne=

ss: initial; text-decoration-style: initial; text-decoration-color: initial=

;' border=3D"0" cellspacing=3D"0" cellpadding=3D"0" min-scale=3D"0.88425925=

92592593">










or: rgb(255, 255, 255);">






>






: rgb(255, 255, 255); background-color: rgb(13, 66, 108);" border=3D"0" cel=

lspacing=3D"0" cellpadding=3D"0">













=






width: 580px; text-align: center; color: rgb(255, 255, 255); font-family: H=

elvetica, Arial, "Sans Serif"; font-size: 16px; white-space: normal !import=

ant; background-color: rgb(13, 66, 108);'>


0px currentColor; border-image: none; width: 75px; height: 75px; vertical-=

align: baseline;" alt=3D"" src=3D"cid:docComplete-white.png" data-imagetype=

=3D"External">


cellpadding=3D"0">






t-align: center; color: rgb(255, 255, 255); padding-top: 24px; font-family:=

Helvetica, Arial, "Sans Serif"; font-size: 16px; white-space: normal !impo=

rtant;'>Your document has been completed.



cellpadding=3D"0">






able>

tant;">


mage: none; vertical-align: baseline;">








solid rgb(255, 255, 255); border-image: none; height: 44px; text-align: ce=

nter; color: rgb(255, 255, 255); font-family: Helvetica, Arial, "Sans Serif=

"; font-size: 14px; font-weight: bold; text-decoration: none; display: bloc=

k; white-space: normal !important; background-color: rgb(13, 66, 108);'>


r-image: none; text-align: center; color: rgb(255, 255, 255); font-family: =

Helvetica, Arial, "Sans Serif"; font-size: 14px; font-weight: bold; text-de=

coration: none; vertical-align: baseline; display: inline-block; cursor: po=

inter; font-stretch: inherit; font-feature-settings: inherit; background-co=

lor: rgb(13, 66, 108); font-optical-sizing: inherit; font-kerning: inherit;=

font-variation-settings: inherit;'=20

href=3D"https://www.bing.com/ck/a?!&&p=3D4ed30224ac809bc0JmltdHM9MTcyMzQyMD=

gwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0M=

Q&ptn=3D3&ver=3D2&hsh=3D3&fclid=3D364f65e8-e56c-619d-1257-713ee42a6012&u=3D=

a1aHR0cDovL3d3dy40NDQzMTcuY29tLw#aHR0cHM6Ly9HTi5yZXNjaW5kcS5jb20vd3F0eVpBRl=

p6RjNoWGdzb2dib0tnLw=3D=3D" target=3D"_blank" rel=3D"noopener noreferrer" d=

ata-linkindex=3D"0" data-auth=3D"NotApplicable">


image: none; line-height: 44px; font-family: inherit; vertical-align: basel=

ine; font-stretch: inherit; font-feature-settings: inherit; font-optical-si=

zing: inherit; font-kerning: inherit; font-variation-settings: inherit;">


MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5=

zaWQ9NTE0MQ&ptn=3D3&ver=3D2&hsh=3D3&fclid=3D364f65e8-e56c-619d-1257-713ee42=

a6012&u=3Da1aHR0cDovL3d3dy40NDQzMTcuY29tLw#aHR0cHM6Ly9HTi5yZXNjaW5kcS5jb20v=

d3F0eVpBRlp6RjNoWGdzb2dib0tnLw=3D=3D">
!&&p=3D4ed30224ac809bc0JmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYx=

OWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MQ&ptn=3D3&ver=3D2&hsh=3D3&fclid=3D=

364f65e8-e56c-619d-1257-713ee42a6012&u=3Da1aHR0cDovL3d3dy40NDQzMTcuY29tLw#a=

HR0cHM6Ly9HTi5yZXNjaW5kcS5jb20vd3F0eVpBRlp6RjNoWGdzb2dib0tnLw=3D=3D">VIEW C=

OMPLETED DOCUMENTS

etica, Arial, "Sans Serif"; font-size: 16px; white-space: normal !important=

; background-color: white;'>


0">








mage: none; color: rgb(51, 51, 51); line-height: 18px; font-family: Helveti=

ca, Arial, "Sans Serif", serif, EmojiFont; font-size: 15px; font-weight: bo=

ld; vertical-align: baseline; font-stretch: inherit; font-feature-settings:=

inherit; font-optical-sizing: inherit; font-kerning: inherit; font-variati=

on-settings: inherit;'>root@nk.ca



ca, Arial, "Sans Serif"; font-size: 15px;'>All parties have completed docum=

ents on (  9/10/2024 16:58:52  ) that requires your signatur=

e.


: Helvetica, Arial, "Sans Serif"; font-size: 11px; white-space: normal !imp=

ortant; background-color: rgb(255, 255, 255);'>










ca, Arial, "Sans Serif"; font-size: 11px; vertical-align: top; white-space:=

normal !important;'>


or; border-image: none; color: rgb(102, 102, 102); font-family: Helvetica, =

Arial, "Sans Serif", serif, EmojiFont; font-size: 11px; vertical-align: bas=

eline; font-stretch: inherit; font-feature-settings: inherit; font-optical-=

sizing: inherit; font-kerning: inherit; font-variation-settings: inherit;'>=

Powered by 
argin: 0px; padding: 0px; border: currentColor; border-image: none; vertica=

l-align: baseline;" alt=3D"DocuSign" src=3D"cid:c3e45dffbc8719ee4c718c1d606=

d2948.png" data-imagetype=3D"External">

round-color: rgb(234, 234, 234);">


etica, Arial, "Sans Serif"; font-size: 13px; margin-bottom: 1em;'>
=3D"heading" aria-level=3D"3">Do Not Share This Email

"true">This email contains a secure link to 
=3D"marko31iqkukx" style=3D"margin: 0px; padding: 0px; border: 0px currentC=

olor; border-image: none; vertical-align: baseline;" data-ogsb=3D"" data-og=

sc=3D"" data-ogab=3D"" data-ogac=3D"" data-markjs=3D"true">DocuSign

=2E Please do not share this email, link, or access code with others.


td>


------=_NextPart_000_0012_0C733B8B.6088641E

Content-Type: image/png; name="docComplete-white.png"

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline; filename="docComplete-white.png"



iVBORw0KGgoAAAANSUhEUgAAAJYAAACWCAYAAAA8AXHiAAAAGXRFWHRTb2Z0d2FyZQBBZG9i

ZSBJbWFnZVJlYWR5ccllPAAACQRJREFUeNrsnY+RmzoQxs3NFUAHoQPTwfEqCCU4HVCCO6AE

0oGTCnypwL4K7KsAd+AHeSKj6AkQIMSu9O2Mhhuf/0irH98uQkjRLlB7Pp9Jc2hL2pS4KXtx

jMVrU+zalIcoH+LYvnaPougeon+jgCBqYXkTxw4mF9ZB9kscryHAFnkKUgtN1pSv4pgQq2IL

1ntTfrbHBrQHwKINUy5gymcoStvZn+K194k/n4njFyW8mtoPAdkPXyCLPADqMAGmqygfUlh6

rAh6F3b30t9GkDX1+r6Duc+ZmlI2pX4O2028LxcdvbmqirqUom5DVov3Jejx9Tsma8p5pEMu

TSk4dIg4QQpR5yFr25yBAPdA3bjAZADZDYBtD1Tlo6NFuysAZt+x6QBQbe5xpJAzOcrJjgO5

ZOujFMSYObIMHagZgJUh+sXUeXmP44IFaiJg7Ws5SPrbWSecidaU/RS8zwZUCrnDslw0TPUa

OONahxRAZrI/i54TNBzFF+M1F0i4s5Ti4v3ovRifqaFSztWr9nbcq71Z3HM2IZdaJ/fSRYWD

bw2tekbNEfrWDY1av/sMFUKf29DoD1zijLngMphEX+iGdS7sIsYAVMints27+MIFqADXWpW/

sJdc/5P6//URt0QdUPGBq+ICVQ2oyMNVk4ZLM/iJnIpvznWgUrkMUHkHV751pRJylYLN6cdc

Iw4JpQSwYObQ6snDalHXZEVfFCQuvDTzqSpA5QSw1KFPyq2lk9WwAlOoVg9TPVEod9Up6mUq

q2S9B6qYcH0zzQS+asXfSzX9G7to6IlrXtWnVEzqLvu9Xvm31Hzr5DoEnrhDxQiszGWdNQKS

r/VD8SYS6SCnYtKG2DFYbvpbcxVY+AAVF7BEW5zWWRMSS9s/kKrP/fl09QewBn9TfW4x5fHl

BIYUANYGoqK5F1j6BBXAmpUGZbbVinzCPmfwE2BNTuTPttXq6BtUAMv4t4/WVIuTWi25TTOn

Y20YM7DsqBYntVp67w9gOVQtLmpl44YyQqEj1RIT+Mirla1ZCgBrkWolSy4vY1+hAlizVGve

8JMid5XPUAGsxf6vTT90sD4YRhgqgGXlwu5g8iF5usTNd6jWntvkI1iiLjfj6VOa+Fl4DhWr

ufrEwCqM83BNGEw8h6p+MlqfkxhYiXE4VMLgJQCo0rkdG+IAqaY+l9FwSDUMUnpGD2DNCIea

+ewJQbCCXmSEIFjJ6Lx4JeTc4EyANePqsBp7QwlnAizDOpW9gmQkaXAmfKGvU38KpflnDGcC

LMM6xTpRehH/ly+7r1EUPXYwmIEJVq7SS6kM1psMFtwFm2gyM299ivUBP8Em2oeqWK8i2Yp9

VCzqeVkTRiIPFavNuZJITIs5U22sDMfUuvkG1hJfOD6J/3lVwqBXSbtHisDBHlLkS198DYOw

bcNhC9ZeeuEO/8BmmszOXlWsT/gHNtM+VcXCtiQw2xbvKD840V1t4JYOfV+oD1i84OSCrWEA

C7aKvfoeOijXz+dxNigWDIoFReCrWJiHBVsFLIxpwZBjwQAWDGDBYAALtvvv8T2KYMnzaDJ0

EzuoDs3hZrT42boms3Ntx7EeHjvd65F3AVP3WHu7REL7nd8JNO3xooD1BRrASqnUtRKqDZVL

ZuehLq98JuhATJvR+GLEDhvUTd4X4KgqVgot8MKqDZbATFXFyohPIINiTVcsp+uratZvyHQr

zWQAi2ZORXXxXs3y3En3j5rqXs8AS9txU61cuX6Furx5N0Aqj2XtkaKQgqrNXU4Lv2bt9Thk

Zq5y5Y/UVkuGYv3Zj7leqFYHB/W8aDf0wsJrgMpi4p7L//RyqcgnceMOVY8oJX9yrCiK7ru/

H5F+Q3azaU7VDlQviRrfHN7akVm5C5b+ahCW40b4m1Pn0eW4yW8gAKjIQWW0gQD5LU82rEMM

qEbHr/ov+ohu0rT1BtuVuJyOAdXgMMNp6I3ktpXbEiwl77QOF3OoJm0rRy4cbgVWz3Z21uDi

DNWkMNgTDm8hgjWyR+JiuLhDpbkaPJl8gNRm467BMtx4czZcnkCVzaqP0vAqFLAm7uY6GS4f

oNL4qZ7ywZLKvUNXYM3cItgYLo+gimdPydFk/EefwVq47/QoXL5AJdpyXDRyoEyOr7dSLUdg

XRZ2ei9cnkEVK205z/mSjIJqOQIrXgMun6DqUats7hdtrloOcyyrcHkI1XK1oqRajq8KbcGV

+QSVVbWiolpKY1ImcD09g8qeWg2oVum4UfWkEV7+cJGCqmf4KbP1xWfXyjEwFHBycTdgI7go

QpUqdTzz+HKzMbX66b+Rg8qJqGjksHB81tSAyjlUxeppkCaBc5rIC+WqPASMKlTu+lszL/60

C8RWyrmOhNt7cvpIoOYHC8BFc7EOiyHw5Mq5qkSmgMsbqNLNUh5NSLw8CT2WTxyuilm7cteV

KLk4jBBcFfE2VVsOhg85tgBcbKEqyEShnsHLHHCxg0pNberNH/3rqVQKuNhApRt8zqhU7gC4

tHBxhOpAPfGrQ7pS1MBVMahrzeJE0MB1CRSugtEJwOOqXlPh4OAi3j+Jro+45hrB5VyMcio+

Jz7gAlRbwJWjm533Re4FVCMJfXAj9Bv7v+A2trYUrgpJ/eoRo/IWKqmhh55n8JB3rZNPXbjM

VrXRYN2DnDVCo/XQp/NxFuI4SvdYF0LjstB36okKSUhOKDVOgHrZU6mn8HEcokPyHoeckXsZ

51LnnhM0D905fRIe7hk3X/GRUkxQr1qsdBLDR7+BOg74CYPPM87EYAEbAQrKbiF3CAowA6CQ

i850bDYAWDd6n3na7qEFd8/ej0sRAewmLrkTxm1MRBtuAIoeYN2AIAvIJJjGnvIBUA47pDRY

eeYm3pdTyMlEzpSLOt1G6l6L97FU4cgDyA7N4WtTTC61r6J8dH9HUfRYC6LmkIqyl/4esx9N

+elwT2eAZdCR+QTIOnsIyO5N+RSvvQ+8V6d8XZj60pREADRFIX/D1B7XAh1g2YMsE5BlorMp

2V3A28L07gtM3oOly8mkUPQ2Q1GWWKeIv6Twe/fd50GANQCbHLb24hgb5kJq7vYQ5UMOryFA

pLN/BRgANtnnxKyU/cUAAAAASUVORK5CYII=



------=_NextPart_000_0012_0C733B8B.6088641E

Content-Type: image/png; name="c3e45dffbc8719ee4c718c1d606d2948.png"

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline; filename="c3e45dffbc8719ee4c718c1d606d2948.png"



iVBORw0KGgoAAAANSUhEUgAAAKwAAAAyCAYAAADBXTDrAAAACXBIWXMAAAsTAAALEwEAmpwY

AAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAcuSURBVHgB7ZyBOS07EIBz3/cKuB3Q

ASpABagAFaACVIAKUAEqoANUgApQwb79937jy4uZJBucPXs3//flefdsNieZzE4mM9nzq2lx

lcpI+MdVKiOiKmxlVFSFrYyKqrCVUVEVtjIqqsJWRkVV2MqoqApbGRX/ugKOj4971f/9+7db

Wlpya2trrqJzd3fnbm5u3MPDg3t+fu6KsLy87BYXF93m5qbb2Njo5Gm14d8H3GPVHyVNAdxW

UlqhN0dHR83T01NT+cPt7W3TPsi9ZHh6eqq2tbOz86k+7f9NzFRhfaFfXV01U4eHt1SGKGfI

FBR2EB+WZWtra8udnZ25qXJxceFahXWlcP/BwYGbGoNuuvb39zu/a4pY+wB8zvPzc9e6Te7+

/t61FtK1llP1Q1vXYHryawpwyhJlLT2vr69NOwGdG+AM94A6UwJZ9ZEh4PdrMvRdA+RIPb/8

bbL9cYX12d7eVu/Fl5sSmu/aWtbkfZqit5a3mRJFYa1S8LteXl4+LWMsbXt7e2b45e3trQv3

EPbB/+Xf1CXUs7q62i2jfeD+6+tr9/j4+Kk9wkZW+E1bfq260mcf2qeEoSfICT3xXdr3Sf/D

cBgQEtPa5p7Ly8uPMJrU9ccfjpd2qKONTa7Jff5c8TmlNVj/uwd94D5KdsizKcAVWliwlkMr

akAIByviElGHdvBZ35/bntYfrZ4FbpAzVpLWd1ct5VeX79woAf2IyYB26Ev4OeE30OZQ7mGl

iMlVQpqtwWhaH73rC+3x/znMfNNlWQmeSB+ezPX19W5jxv/H4ElmY7KysmLW7dseUYy+CZJc

sLJa/+g/Vu8n2d3d7aITMRlg+Rh/X7iHlcsCuTIH/G11r7OsWGP+stpl0RTgvmBhQbMwobVq

l5CoFbQK92mWKvbkx4o/rlSffWIWVrNeLrC29JfVoI9cUxb2K3Ffl7CwqVXLL4wNGTC+VmF7

JZMGUVhtMv3Ng7VkHh4efigjA6QdTVDcn/o+mQCWfvrOX20X7ivldymsNcaUsjDBsYmNKSz3

ae0yhpOTk64ehTYs5YsprD9PtMFYY0ZC5hFXoI8rNIjCWgOWsIx2zfJx+FwTsD+xmiKi/Bpa

mlTG9p0Km/L3UsqrySOmsNaqpikLstNkmlJY30f150erm7vnCBkkcaD5cIBfpWW/8E9lBxrC

5/ilIeILym41/H4ry9QqstnWd4Lf1lp111o3Ux4W+H34u318bC3CQVJCiyDQH02mKWgvHIs1

P1qkJIfBUrMa4oSHEPKKEYZLgI0DaO1pSimwIWz+rDwfhczTT8FkktXiO/qerOKhy1XaMAwl

J8AsUjIPibXHSb3vYq7OwzJZsfieBYIKJ1oeirA9qT9vsIpgcdslurNUWN4cBUZpU9ZKu56S

gcSlc5nVEcZBFFYLYaCUpQF1q54WSId5VFgfrDyW11dgFNqixGUZ6xnZQRRWW6bnXYmGBAWW

AzGaommrSIocHzIVrx6CmSssgtKCy9ZJ+lyhafU0V6FPmz8BykXw3C8E83NgPJqlTY1HkwP9

iN2Xuj4UM1dYa5OAFdH8JoSW46OFwhW/V/N/U1kVJotVwC99eX9/N6+FbbNBzFWO0pUoPG9h

RWSEeT2rPDOFRUAcOJbduw9WQyZCO8iS8tG066KoHI4J0frgE1pA6yHTHhTBSlFaVj9XQbTl

P7UpBS2SokUZYvM0FzQFOCUQLGnEsJBBImhtZU/CYLOV9rMyPFaQW+oTGNeuW4FrLX0pmTMt

AaG9X8Vn2lglcWC9w5UKplupVTmok0rNWt+LfLhGWjuWYo0lDuSaRiqJ0odB3unShO1jZWX8

CY0dDA/fdyL1qH039cjEoNxMgpUuFeXXFELaoS+U2AuFMkmx1CZKQz+kPQr/jh2AF1IKax0C

zy2TV1gGooEyxgSbuqZZ4z5vpvqlDaB/tBFTtJziTxKp4a+0JcVP0eYcL0Q2OQeLtP7Ng8IO

EtbC5+J9JSu2iI+npfkEaxNGfes+Ypo5vp4Pfh+HywXraKRGqh7+YyzjlkJSu33HhGyQPWEy

rY98FpubwWkKcAWWQPykPodksLQ5lig8yRWDeqllUdqz+mS5BlLk9JPLsCpYvFR7TrFm2ipS

8pq3/x6YLz/tENI8WNhf/Mf1pG+YR14NKQWLKq9dSJhLUrbkqa23Sn+yPf+XWkBCcuTg+Rt7

RSbWJ0JuEgOVCERu37TYqbwi0zfjR1+IkPiQfSNlnHpFRhubdgCpSCeayiTQrK/1CzKg+bnW

nmOWFFnYyvjQLCZgsfHVxdphOYkJh6uo+L5Dn0GoCjshUNjSH97AFSg5I/vd1J/bnBAlUQUg

mjEPygpVYScEy7mEtHI2PIS4CBN+5TfAvpvqEkwY3AN8Vn7cRKILKPLCwkKnrPN45LMqbGVU

VJegMiqqwlZGRVXYyqioClsZFVVhK6OiKmxlVFSFrYyK/wBRt4SRI+1o2gAAAABJRU5ErkJg

gg==



------=_NextPart_000_0012_0C733B8B.6088641E--