Japanese Amazon Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 31 Oct 2024 04:54:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Snj-00000000KNm-25DP

for dave@doctor.nl2k.ab.ca;

Thu, 31 Oct 2024 04:53:15 -0600

Resent-From: The Doctor

Resent-Date: Thu, 31 Oct 2024 04:53:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [42.59.100.246] (port=65224 helo=accounts.nintendo.com)

by doctor.nl2k.ab.ca with smtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6OhV-00000000IaL-3BXG

for www@nl2k.ab.ca;

Thu, 31 Oct 2024 00:30:54 -0600

Content-Type: multipart/alternative; boundary="===============0775110591=="

MIME-Version: 1.0

Message-ID: <420636CB7FD249068C46A5D7114BF3BB@accounts.nintendo.com>

From: =?utf-8?q?Amazon?=

To: =?utf-8?q?www=40nl2k=2Eab=2Eca?=

Subject: =?utf-8?b?44CQ6YeN6KaB44Gq44GK55+l44KJ44Gb44CRQW1hem9u44Ki44Kr44Km44Oz44OI?=

=?utf-8?b?44Gu44K744Kt44Ol44Oq44OG44Kj5pu05paw44GM5b+F6KaB44Gn44GZ77yI6Ieq?=

=?utf-8?b?5YuV6YWN5L+h44Oh44O844Or77yJ?=

Date: Fri, 01 Nov 2024 06:30:54 GMT

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 24.8

X-Spam_score_int: 248

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: **【Amazon】お客様のアカウント認証に関する重要なお知らせ**

| ---|--- **Amazonã‚’ã”åˆ©ç”¨ã„ãŸã ãèª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ã‚·ã‚¹ãƒ†ãƒ ã«ã‚ˆã‚‹å®šæœŸçš„ãªãƒ

[...]



Content analysis details: (24.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[42.59.100.246 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[42.59.100.246 listed in dnsbl.ahbl.org]

[42.59.100.246 listed in dnsbl.ahbl.org]

[42.59.100.246 listed in dnsbl.ahbl.org]

[42.59.100.246 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[42.59.100.246 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[42.59.100.246 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[42.59.100.246 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[42.59.100.246 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to

zen.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[42.59.100.246 listed in zen.spamhaus.org]

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.

See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URI: electronicsindustryreps.com]

[URI: ocn.jp]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: mail.ocn.jp]

[URI: zunoyrfg.electronicsindustryreps.com]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: zunoyrfg.electronicsindustryreps.com/104.21.47.119]

[URI: miki.ns.cloudflare.com/173.245.58.202]

[URI: miles.ns.cloudflare.com/108.162.193.207]

[URI: miles.ns.cloudflare.com/173.245.59.207]

[URI: miki.ns.cloudflare.com/108.162.192.202]

[URI: zunoyrfg.electronicsindustryreps.com/172.67.171.34]

[URI: miki.ns.cloudflare.com/172.64.32.202]

[URI: miles.ns.cloudflare.com/172.64.33.207]

[URI: mail.ocn.jp/153.138.213.164]

[URI: mail.ocn.jp/153.138.219.52]

[URI: ns1.ocn.ad.jp/202.234.232.202]

[URI: ns2.ocn.ad.jp/211.129.12.204]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[42.59.100.246 listed in bb.barracudacentral.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[42.59.100.246 listed in will-spam-for-food.eu.org]

[42.59.100.246 listed in will-spam-for-food.eu.org]

[42.59.100.246 listed in will-spam-for-food.eu.org]

[42.59.100.246 listed in will-spam-for-food.eu.org]

[42.59.100.246 listed in will-spam-for-food.eu.org]

[42.59.100.246 listed in will-spam-for-food.eu.org]

[42.59.100.246 listed in will-spam-for-food.eu.org]

[42.59.100.246 listed in will-spam-for-food.eu.org]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL

was blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[42.59.100.246 listed in list.dnswl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 DATE_IN_FUTURE_24_48 Date: is 24 to 48 hours after Received: date

0.0 HTML_MESSAGE BODY: HTML included in message

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

1.9 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers

Subject: {SPAM?} =?utf-8?b?44CQ6YeN6KaB44Gq44GK55+l44KJ44Gb44CRQW1hem9u44Ki44Kr44Km44Oz44OI?=

=?utf-8?b?44Gu44K744Kt44Ol44Oq44OG44Kj5pu05paw44GM5b+F6KaB44Gn44GZ77yI6Ieq?=

=?utf-8?b?5YuV6YWN5L+h44Oh44O844Or77yJ?=



--===============0775110591==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



KirjgJBBbWF6b27jgJHjgYrlrqLmp5jjga7jgqLjgqvjgqbjg7Pjg4joqo3oqLzjgavplqLjgZnj

govph43opoHjgarjgYrnn6XjgonjgZsqKiB8ICAKLS0tfC0tLSAgCioqQW1hem9u44KS44GU5Yip

55So44GE44Gf44Gg44GN6Kqg44Gr44GC44KK44GM44Go44GG44GU44GW44GE44G+44GZ44CC44K3

44K544OG44Og44Gr44KI44KL5a6a5pyf55qE44Gq44OB44Kn44OD44Kv44Gu57WQ5p6c44CB44GK

5a6i5qeY44Gu44Ki44Kr44Km44Oz44OI44Gr44Gk44GE44Gm5YaN6KqN6Ki844GM5b+F6KaB44Go

44Gq44KK44G+44GX44Gf44CCKiogfCAgCioq44CQ6KqN6Ki85omL6aCG44CRKiogfCAgCioq5b2T

56S+44Gu5YWs5byP44Km44Kn44OW44K144Kk44OI44Gr44Ki44Kv44K744K544GX44Gm44GP44Gg

44GV44GEKiogfCAgCioqW0FtYXpvbuODreOCsOOCpOODs10oaHR0cHM6Ly96dW5veXJmZy5lbGVj

dHJvbmljc2luZHVzdHJ5cmVwcy5jb20vT3pnSkhnKSoqIHwgIAoqKueUu+mdouOBq+ihqOekuuOB

leOCjOOCi+aMh+ekuuOBq+W+k+OBhOOAgeW/heimgeOBquaJi+e2muOBjeOCkuWujOS6huOBl+OB

puOBj+OBoOOBleOBhOOAgioqIHwgIAoqKuOAkOazqOaEj+S6i+mgheOAkSoqIHwgIAoqKuOBk+OB

ruODoeODvOODq+OCkuWPl+S/oeOBl+OBpuOBi+OCiTI05pmC6ZaT5Lul5YaF44Gr6KqN6Ki844KS

5a6M5LqG44GX44Gm44GP44Gg44GV44GE44CC44Gd44GG44GX44Gq44GE5aC05ZCI44CB44GK5a6i

5qeY44Gu44Ki44Kr44Km44Oz44OI44Gv5LiA5pmC55qE44Gr5YeN57WQ44GV44KM44KL5Y+v6IO9

5oCn44GM44GC44KK44G+44GZ44CCKiogfCAgCioq44GU55CG6Kej44Go44GU5Y2U5Yqb44KS44GE

44Gf44Gg44GN44CB6Kqg44Gr44GC44KK44GM44Go44GG44GU44GW44GE44G+44GZ44CC5LuK5b6M

44Go44KC44CBQW1hem9u44Gv44GK5a6i5qeY44Gu5a6J5YWo44Go5Yip5L6/5oCn44KS56ys5LiA

44Gr6ICD44GI44CB44KI44KK6Imv44GE44K144O844OT44K544KS5o+Q5L6b44GZ44KL44Gf44KB

44Gr5Yqq5Yqb44GX44Gm44G+44GE44KK44G+44GZ44CCKioKfCAgCioq5pWs5YW3KiogfCAgCioq

QW1hem9u5qCq5byP5Lya56S+KiogfCAgCioq44Kr44K544K/44Oe44O844K144Od44O844OI6YOo

KiogfCAgCioqCgrjgZPjga7jg6Hjg7zjg6vjga86W+W9ueOBq+eri+OBpF0oaHR0cHM6Ly9tYWls

Lm9jbi5qcC9pbmRleC5odG1sIykgfApb5b2544Gr56uL44Gf44Gq44GEXShodHRwczovL21haWwu

b2NuLmpwL2luZGV4Lmh0bWwjKQoKKiAqICoKCioqIHwgIAogIAp8ICAKKipBIGNvbXBhcmlzb24g

b2YgdHdvIGNvbXBsZXRlIHNldHMgb2YgaHVtYW4gY2VudHJvbWVyZXMgcmV2ZWFscyB0aGF0IHRo

ZQpjZW50cm9tZXJlcyBzaG93IGF0IGxlYXN0IGEgNC4xLWZvbGQgaW5jcmVhc2UgaW4gc2luZ2xl

LW51Y2xlb3RpZGUgdmFyaWF0aW9uCmNvbXBhcmVkIHdpdGggdGhlaXIgdW5pcXVlIGZsYW5rcywg

YW5kIHVwIHRvIDMtZm9sZCB2YXJpYXRpb24gaW4gc2l6ZSwKcmVzdWx0aW5nIGZyb20gYW4gYWNj

ZWxlcmF0ZWQgbXV0YXRpb24gcmF0ZS4qKiB8ICAKKipTY2llbnRpc3RzIGhhdmUgZGVzaWduZWQg

YSBsaXF1aWQgdGhhdCBiZWhhdmVzIGFzIGJvdGggYSBzb2xpZCBhbmQgYSBmbHVpZApvd2luZyB0

byB0aGUgcHJlc2VuY2Ugb2YgdGlueSBnYXMtZmlsbGVkIGNhcHN1bGVzLiBBbiB1bnVzdWFsIHJl

bGF0aW9uc2hpcApiZXR3ZWVuIHByZXNzdXJlIGFuZCB2b2x1bWUgZW5hYmxlcyB0aGlzIG1hdGVy

aWFsIHRvIGdyYXNwIGZyYWdpbGUgb2JqZWN0cy4qKgp8ICAKKipHZW5ldGljIHZhcmlhbnRzIGNv

bnRyaWJ1dGUgdG8gdGhlIHJpc2sgb2YgZGV2ZWxvcGluZyBjZXJ0YWluIGRpc2Vhc2VzLCBidXQK

aWRlbnRpZnlpbmcgdGhlIGdlbmVzIGFuZCBtb2xlY3VsYXIgcGF0aHdheXMgdW5kZXIgdGhlaXIg

Y29udHJvbCBoYXMgYmVlbgpkaWZmaWN1bHQuIE5vdywgYSBzeXN0ZW1hdGljIGFwcHJvYWNoIHRv

IHBpbnBvaW50aW5nIHRoZXNlIGZhY3RvcnMgeWllbGRzCmluc2lnaHRzIGludG8gaG93IGEgc3Bl

Y2lmaWMgcGF0aHdheSBpbiBlbmRvdGhlbGlhbCBjZWxscyBpbmZsdWVuY2VzIHRoZSByaXNrCm9m

IGNvcm9uYXJ5IGFydGVyeSBkaXNlYXNlLioqIHwKCg==



--===============0775110591==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv

L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0

Zi04IiBodHRwLWVxdWl2PUNvbnRlbnQtVHlwZT4NCjxNRVRBIG5hbWU9R0VORVJBVE9SIGNvbnRl

bnQ9Ik1TSFRNTCAxMS4wMC4xMDU3MC4xMDAxIj48L0hFQUQ+DQo8Qk9EWT4NCjxUQUJMRSANCnN0

eWxlPSdGT05ULVNJWkU6IDEycHg7IEJPUkRFUi1UT1A6IDBweDsgRk9OVC1GQU1JTFk6ICLjg5Lj

g6njgq7jg47op5LjgrRQcm9OIFczIiwgIkhpcmFnaW5vIEtha3UgR290aGljIFByb04iLCDjg6Hj

gqTjg6rjgqosIE1laXJ5bywgIu+8re+8syDvvLDjgrTjgrfjg4Pjgq8iLCAiTVMgUEdvdGhpYyIs

IHNhbnMtc2VyaWY7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7

IFdISVRFLVNQQUNFOiBub3JtYWw7IFdPUkQtU1BBQ0lORzogMHB4OyBCT1JERVItQ09MTEFQU0U6

IGNvbGxhcHNlOyBCT1JERVItQk9UVE9NOiAwcHg7IFRFWFQtVFJBTlNGT1JNOiBub25lOyBaT09N

OiAxOyBGT05ULVdFSUdIVDogNDAwOyBDT0xPUjogcmdiKDM0LDM0LDM0KTsgUEFERElORy1CT1RU

T006IDBweDsgRk9OVC1TVFlMRTogbm9ybWFsOyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxF

RlQ6IDBweDsgQk9SREVSLVNQQUNJTkc6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgT1JQSEFOUzog

MjsgV0lET1dTOiAyOyBNQVJHSU46IDBweDsgTEVUVEVSLVNQQUNJTkc6IG5vcm1hbDsgUEFERElO

Ry1SSUdIVDogMHB4OyBCQUNLR1JPVU5ELUNPTE9SOiByZ2IoMjU1LDI1NSwyNTUpOyBmb250LXZh

cmlhbnQtbGlnYXR1cmVzOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt

dmFyaWFudC1udW1lcmljOiBpbmhlcml0OyBmb250LXZhcmlhbnQtZWFzdC1hc2lhbjogaW5oZXJp

dDsgZm9udC12YXJpYW50LWFsdGVybmF0ZXM6IGluaGVyaXQ7IGZvbnQtdmFyaWFudC1wb3NpdGlv

bjogaW5oZXJpdDsgZm9udC1zdHJldGNoOiBpbmhlcml0OyBmb250LW9wdGljYWwtc2l6aW5nOiBp

bmhlcml0OyBmb250LWtlcm5pbmc6IGluaGVyaXQ7IGZvbnQtZmVhdHVyZS1zZXR0aW5nczogaW5o

ZXJpdDsgZm9udC12YXJpYXRpb24tc2V0dGluZ3M6IGluaGVyaXQ7IC13ZWJraXQtdGV4dC1zdHJv

a2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uLXRoaWNrbmVzczogaW5pdGlhbDsgdGV4dC1k

ZWNvcmF0aW9uLXN0eWxlOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tY29sb3I6IGluaXRpYWwn

Pg0KICA8VEJPRFkgDQogIHN0eWxlPSJGT05ULVNJWkU6IDE0cHg7IEJPUkRFUi1UT1A6IDBweDsg

Rk9OVC1GQU1JTFk6IGluaGVyaXQ7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjog

YmFzZWxpbmU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgUEFERElORy1CT1RUT006IDBw

eDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7

IE1BUkdJTjogMHB4OyBMSU5FLUhFSUdIVDogMjVweDsgUEFERElORy1SSUdIVDogMHB4OyBmb250

LXN0cmV0Y2g6IGluaGVyaXQ7IGZvbnQtb3B0aWNhbC1zaXppbmc6IGluaGVyaXQ7IGZvbnQta2Vy

bmluZzogaW5oZXJpdDsgZm9udC1mZWF0dXJlLXNldHRpbmdzOiBpbmhlcml0OyBmb250LXZhcmlh

dGlvbi1zZXR0aW5nczogaW5oZXJpdCI+DQogIDxUUiANCiAgc3R5bGU9IkJPUkRFUi1UT1A6IDBw

eDsgQk9SREVSLVJJR0hUOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsgQk9SREVSLUJP

VFRPTTogMHB4OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4

OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJ

TkctUklHSFQ6IDBweCI+DQogICAgPFREIA0KICAgIHN0eWxlPSJGT05ULVNJWkU6IDE2cHg7IEJP

UkRFUi1UT1A6IDBweDsgRk9OVC1GQU1JTFk6IGluaGVyaXQ7IEJPUkRFUi1SSUdIVDogMHB4OyBW

RVJUSUNBTC1BTElHTjogbWlkZGxlOyBCT1JERVItQk9UVE9NOiAwcHg7IFpPT006IDE7IFBBRERJ

TkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JE

RVItTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBmb250LXN0cmV0

Y2g6IGluaGVyaXQ7IGZvbnQtb3B0aWNhbC1zaXppbmc6IGluaGVyaXQ7IGZvbnQta2VybmluZzog

aW5oZXJpdDsgZm9udC1mZWF0dXJlLXNldHRpbmdzOiBpbmhlcml0OyBmb250LXZhcmlhdGlvbi1z

ZXR0aW5nczogaW5oZXJpdCIgDQogICAgYWxpZ249Y2VudGVyPjxTVFJPTkcgDQogICAgICBzdHls

ZT0iQk9SREVSLVRPUDogMHB4OyBGT05ULUZBTUlMWTogaW5oZXJpdDsgQk9SREVSLVJJR0hUOiAw

cHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsgQk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAx

OyBGT05ULVdFSUdIVDogYm9sZGVyOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDog

MHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBB

RERJTkctUklHSFQ6IDBweDsgZm9udC1zdHJldGNoOiBpbmhlcml0OyBmb250LW9wdGljYWwtc2l6

aW5nOiBpbmhlcml0OyBmb250LWtlcm5pbmc6IGluaGVyaXQ7IGZvbnQtZmVhdHVyZS1zZXR0aW5n

czogaW5oZXJpdDsgZm9udC12YXJpYXRpb24tc2V0dGluZ3M6IGluaGVyaXQiPuOAkEFtYXpvbuOA

keOBiuWuouanmOOBruOCouOCq+OCpuODs+ODiOiqjeiovOOBq+mWouOBmeOCi+mHjeimgeOBquOB

iuefpeOCieOBmzwvU1RST05HPjwvVEQ+DQogICAgPFREIA0KICAgIHN0eWxlPSJCT1JERVItVE9Q

OiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogbWlkZGxlOyBCT1JERVIt

Qk9UVE9NOiAwcHg7IFpPT006IDE7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAw

cHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFE

RElORy1SSUdIVDogMHB4Ij48L1REPjwvVFI+DQogIDxUUiANCiAgc3R5bGU9IkJPUkRFUi1UT1A6

IDBweDsgQk9SREVSLVJJR0hUOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsgQk9SREVS

LUJPVFRPTTogMHB4OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDog

MHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBB

RERJTkctUklHSFQ6IDBweCI+DQogICAgPFREIA0KICAgIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7

IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogbWlkZGxlOyBCT1JERVItQk9UVE9N

OiAwcHg7IFpPT006IDE7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBB

RERJTkctTEVGVDogMHB4OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1S

SUdIVDogMHB4Ij48U1RST05HIA0KICAgICAgc3R5bGU9IkJPUkRFUi1UT1A6IDBweDsgRk9OVC1G

QU1JTFk6IGluaGVyaXQ7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxp

bmU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgRk9OVC1XRUlHSFQ6IGJvbGRlcjsgUEFE

RElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJP

UkRFUi1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IGZvbnQtc3Ry

ZXRjaDogaW5oZXJpdDsgZm9udC1vcHRpY2FsLXNpemluZzogaW5oZXJpdDsgZm9udC1rZXJuaW5n

OiBpbmhlcml0OyBmb250LWZlYXR1cmUtc2V0dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFyaWF0aW9u

LXNldHRpbmdzOiBpbmhlcml0Ij5BbWF6b27jgpLjgZTliKnnlKjjgYTjgZ/jgaDjgY3oqqDjgavj

gYLjgorjgYzjgajjgYbjgZTjgZbjgYTjgb7jgZnjgILjgrfjgrnjg4bjg6Djgavjgojjgovlrprm

nJ/nmoTjgarjg4Hjgqfjg4Pjgq/jga7ntZDmnpzjgIHjgYrlrqLmp5jjga7jgqLjgqvjgqbjg7Pj

g4jjgavjgaTjgYTjgablho3oqo3oqLzjgYzlv4XopoHjgajjgarjgorjgb7jgZfjgZ/jgII8L1NU

Uk9ORz48L1REPg0KICAgIDxURCANCiAgICBzdHlsZT0iQk9SREVSLVRPUDogMHB4OyBCT1JERVIt

UklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IG1pZGRsZTsgQk9SREVSLUJPVFRPTTogMHB4OyBa

T09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxF

RlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBw

eCI+PC9URD48L1RSPg0KICA8VFIgDQogIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEJPUkRFUi1S

SUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT006IDBweDsg

Wk9PTTogMTsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1M

RUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAw

cHgiPg0KICAgIDxURCANCiAgICBzdHlsZT0iQk9SREVSLVRPUDogMHB4OyBCT1JERVItUklHSFQ6

IDBweDsgVkVSVElDQUwtQUxJR046IG1pZGRsZTsgQk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAx

OyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBw

eDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBweCI+PFNU

Uk9ORyANCiAgICAgIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEZPTlQtRkFNSUxZOiBpbmhlcml0

OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9U

VE9NOiAwcHg7IFpPT006IDE7IEZPTlQtV0VJR0hUOiBib2xkZXI7IFBBRERJTkctQk9UVE9NOiAw

cHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVItTEVGVDogMHB4

OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBmb250LXN0cmV0Y2g6IGluaGVyaXQ7

IGZvbnQtb3B0aWNhbC1zaXppbmc6IGluaGVyaXQ7IGZvbnQta2VybmluZzogaW5oZXJpdDsgZm9u

dC1mZWF0dXJlLXNldHRpbmdzOiBpbmhlcml0OyBmb250LXZhcmlhdGlvbi1zZXR0aW5nczogaW5o

ZXJpdCI+44CQ6KqN6Ki85omL6aCG44CRPC9TVFJPTkc+PC9URD4NCiAgICA8VEQgDQogICAgc3R5

bGU9IkJPUkRFUi1UT1A6IDBweDsgQk9SREVSLVJJR0hUOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBt

aWRkbGU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgUEFERElORy1CT1RUT006IDBweDsg

UEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1B

UkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHgiPjwvVEQ+PC9UUj4NCiAgPFRSIA0KICBzdHls

ZT0iQk9SREVSLVRPUDogMHB4OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IGJh

c2VsaW5lOyBCT1JERVItQk9UVE9NOiAwcHg7IFpPT006IDE7IFBBRERJTkctQk9UVE9NOiAwcHg7

IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVItTEVGVDogMHB4OyBN

QVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4Ij4NCiAgICA8VEQgDQogICAgc3R5bGU9IkJP

UkRFUi1UT1A6IDBweDsgQk9SREVSLVJJR0hUOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBtaWRkbGU7

IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgUEFERElORy1CT1RUT006IDBweDsgUEFERElO

Ry1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1BUkdJTjog

MHB4OyBQQURESU5HLVJJR0hUOiAwcHgiPjxTVFJPTkcgDQogICAgICBzdHlsZT0iQk9SREVSLVRP

UDogMHB4OyBGT05ULUZBTUlMWTogaW5oZXJpdDsgQk9SREVSLVJJR0hUOiAwcHg7IFZFUlRJQ0FM

LUFMSUdOOiBiYXNlbGluZTsgQk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAxOyBGT05ULVdFSUdI

VDogYm9sZGVyOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5H

LUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6

IDBweDsgZm9udC1zdHJldGNoOiBpbmhlcml0OyBmb250LW9wdGljYWwtc2l6aW5nOiBpbmhlcml0

OyBmb250LWtlcm5pbmc6IGluaGVyaXQ7IGZvbnQtZmVhdHVyZS1zZXR0aW5nczogaW5oZXJpdDsg

Zm9udC12YXJpYXRpb24tc2V0dGluZ3M6IGluaGVyaXQiPuW9k+ekvuOBruWFrOW8j+OCpuOCp+OD

luOCteOCpOODiOOBq+OCouOCr+OCu+OCueOBl+OBpuOBj+OBoOOBleOBhDwvU1RST05HPjwvVEQ+

DQogICAgPFREIA0KICAgIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4

OyBWRVJUSUNBTC1BTElHTjogbWlkZGxlOyBCT1JERVItQk9UVE9NOiAwcHg7IFpPT006IDE7IFBB

RERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBC

T1JERVItTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4Ij48L1REPjwv

VFI+DQogIDxUUiANCiAgc3R5bGU9IkJPUkRFUi1UT1A6IDBweDsgQk9SREVSLVJJR0hUOiAwcHg7

IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsgQk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAxOyBQ

QURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsg

Qk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBweCI+DQogICAg

PFREIA0KICAgIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJU

SUNBTC1BTElHTjogbWlkZGxlOyBCT1JERVItQk9UVE9NOiAwcHg7IFpPT006IDE7IFBBRERJTkct

Qk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVIt

TEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4Ij48U1RST05HIA0KICAg

ICAgc3R5bGU9IkJPUkRFUi1UT1A6IDBweDsgRk9OVC1GQU1JTFk6IGluaGVyaXQ7IEJPUkRFUi1S

SUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT006IDBweDsg

Wk9PTTogMTsgRk9OVC1XRUlHSFQ6IGJvbGRlcjsgUEFERElORy1CT1RUT006IDBweDsgUEFERElO

Ry1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1BUkdJTjog

MHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IGZvbnQtc3RyZXRjaDogaW5oZXJpdDsgZm9udC1vcHRp

Y2FsLXNpemluZzogaW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhlcml0OyBmb250LWZlYXR1cmUt

c2V0dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFyaWF0aW9uLXNldHRpbmdzOiBpbmhlcml0Ij48QSAN

CiAgICAgIHN0eWxlPSJURVhULURFQ09SQVRJT046IHVuZGVybGluZTsgQk9SREVSLVRPUDogMHB4

OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9U

VE9NOiAwcHg7IFpPT006IDE7IENPTE9SOiByZ2IoMCwwLDIzOCk7IFBBRERJTkctQk9UVE9NOiAy

MHB4OyBURVhULUFMSUdOOiBjZW50ZXI7IFBBRERJTkctVE9QOiAyMHB4OyBQQURESU5HLUxFRlQ6

IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IERJU1BMQVk6IGJsb2NrOyBQQURE

SU5HLVJJR0hUOiAwcHg7IEJBQ0tHUk9VTkQtQ09MT1I6IHRyYW5zcGFyZW50OyB0cmFuc2l0aW9u

OiBhbGwgMC4xcyBlYXNlLWluLW91dCAwcyIgDQogICAgICBocmVmPSJodHRwczovL3p1bm95cmZn

LmVsZWN0cm9uaWNzaW5kdXN0cnlyZXBzLmNvbS9PemdKSGciIHRhcmdldD1fYmxhbms+QW1hem9u

44Ot44Kw44Kk44OzPC9BPjwvU1RST05HPjwvVEQ+DQogICAgPFREIA0KICAgIHN0eWxlPSJCT1JE

RVItVE9QOiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogbWlkZGxlOyBC

T1JERVItQk9UVE9NOiAwcHg7IFpPT006IDE7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkct

VE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46IDBw

eDsgUEFERElORy1SSUdIVDogMHB4Ij48L1REPjwvVFI+DQogIDxUUiANCiAgc3R5bGU9IkJPUkRF

Ui1UT1A6IDBweDsgQk9SREVSLVJJR0hUOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsg

Qk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5H

LVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAw

cHg7IFBBRERJTkctUklHSFQ6IDBweCI+DQogICAgPFREIA0KICAgIHN0eWxlPSJCT1JERVItVE9Q

OiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogbWlkZGxlOyBCT1JERVIt

Qk9UVE9NOiAwcHg7IFpPT006IDE7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAw

cHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFE

RElORy1SSUdIVDogMHB4Ij48U1RST05HIA0KICAgICAgc3R5bGU9IkJPUkRFUi1UT1A6IDBweDsg

Rk9OVC1GQU1JTFk6IGluaGVyaXQ7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjog

YmFzZWxpbmU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgRk9OVC1XRUlHSFQ6IGJvbGRl

cjsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAw

cHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IGZv

bnQtc3RyZXRjaDogaW5oZXJpdDsgZm9udC1vcHRpY2FsLXNpemluZzogaW5oZXJpdDsgZm9udC1r

ZXJuaW5nOiBpbmhlcml0OyBmb250LWZlYXR1cmUtc2V0dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFy

aWF0aW9uLXNldHRpbmdzOiBpbmhlcml0Ij7nlLvpnaLjgavooajnpLrjgZXjgozjgovmjIfnpLrj

gavlvpPjgYTjgIHlv4XopoHjgarmiYvntprjgY3jgpLlrozkuobjgZfjgabjgY/jgaDjgZXjgYTj

gII8L1NUUk9ORz48L1REPg0KICAgIDxURCANCiAgICBzdHlsZT0iQk9SREVSLVRPUDogMHB4OyBC

T1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IG1pZGRsZTsgQk9SREVSLUJPVFRPTTog

MHB4OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURE

SU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklH

SFQ6IDBweCI+PC9URD48L1RSPg0KICA8VFIgDQogIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEJP

UkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT006

IDBweDsgWk9PTTogMTsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFE

RElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJ

R0hUOiAwcHgiPg0KICAgIDxURCANCiAgICBzdHlsZT0iQk9SREVSLVRPUDogMHB4OyBCT1JERVIt

UklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IG1pZGRsZTsgQk9SREVSLUJPVFRPTTogMHB4OyBa

T09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxF

RlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBw

eCI+PFNUUk9ORyANCiAgICAgIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEZPTlQtRkFNSUxZOiBp

bmhlcml0OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5lOyBCT1JE

RVItQk9UVE9NOiAwcHg7IFpPT006IDE7IEZPTlQtV0VJR0hUOiBib2xkZXI7IFBBRERJTkctQk9U

VE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVItTEVG

VDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBmb250LXN0cmV0Y2g6IGlu

aGVyaXQ7IGZvbnQtb3B0aWNhbC1zaXppbmc6IGluaGVyaXQ7IGZvbnQta2VybmluZzogaW5oZXJp

dDsgZm9udC1mZWF0dXJlLXNldHRpbmdzOiBpbmhlcml0OyBmb250LXZhcmlhdGlvbi1zZXR0aW5n

czogaW5oZXJpdCI+44CQ5rOo5oSP5LqL6aCF44CRPC9TVFJPTkc+PC9URD4NCiAgICA8VEQgDQog

ICAgc3R5bGU9IkJPUkRFUi1UT1A6IDBweDsgQk9SREVSLVJJR0hUOiAwcHg7IFZFUlRJQ0FMLUFM

SUdOOiBtaWRkbGU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgUEFERElORy1CT1RUT006

IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAw

cHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHgiPjwvVEQ+PC9UUj4NCiAgPFRSIA0K

ICBzdHlsZT0iQk9SREVSLVRPUDogMHB4OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJ

R046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NOiAwcHg7IFpPT006IDE7IFBBRERJTkctQk9UVE9N

OiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVItTEVGVDog

MHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4Ij4NCiAgICA8VEQgDQogICAgc3R5

bGU9IkZPTlQtU0laRTogMTBweDsgQk9SREVSLVRPUDogMHB4OyBGT05ULUZBTUlMWTogaW5oZXJp

dDsgQk9SREVSLVJJR0hUOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBtaWRkbGU7IEJPUkRFUi1CT1RU

T006IDBweDsgWk9PTTogMTsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsg

UEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBMSU5FLUhF

SUdIVDogMjBweDsgUEFERElORy1SSUdIVDogMHB4OyBmb250LXN0cmV0Y2g6IGluaGVyaXQ7IGZv

bnQtb3B0aWNhbC1zaXppbmc6IGluaGVyaXQ7IGZvbnQta2VybmluZzogaW5oZXJpdDsgZm9udC1m

ZWF0dXJlLXNldHRpbmdzOiBpbmhlcml0OyBmb250LXZhcmlhdGlvbi1zZXR0aW5nczogaW5oZXJp

dCI+PFNUUk9ORyANCiAgICAgIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEZPTlQtRkFNSUxZOiBp

bmhlcml0OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5lOyBCT1JE

RVItQk9UVE9NOiAwcHg7IFpPT006IDE7IEZPTlQtV0VJR0hUOiBib2xkZXI7IFBBRERJTkctQk9U

VE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVItTEVG

VDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBmb250LXN0cmV0Y2g6IGlu

aGVyaXQ7IGZvbnQtb3B0aWNhbC1zaXppbmc6IGluaGVyaXQ7IGZvbnQta2VybmluZzogaW5oZXJp

dDsgZm9udC1mZWF0dXJlLXNldHRpbmdzOiBpbmhlcml0OyBmb250LXZhcmlhdGlvbi1zZXR0aW5n

czogaW5oZXJpdCI+44GT44Gu44Oh44O844Or44KS5Y+X5L+h44GX44Gm44GL44KJMjTmmYLplpPk

u6XlhoXjgavoqo3oqLzjgpLlrozkuobjgZfjgabjgY/jgaDjgZXjgYTjgILjgZ3jgYbjgZfjgarj

gYTloLTlkIjjgIHjgYrlrqLmp5jjga7jgqLjgqvjgqbjg7Pjg4jjga/kuIDmmYLnmoTjgavlh43n

tZDjgZXjgozjgovlj6/og73mgKfjgYzjgYLjgorjgb7jgZnjgII8L1NUUk9ORz48L1REPg0KICAg

IDxURCANCiAgICBzdHlsZT0iQk9SREVSLVRPUDogMHB4OyBCT1JERVItUklHSFQ6IDBweDsgVkVS

VElDQUwtQUxJR046IG1pZGRsZTsgQk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAxOyBQQURESU5H

LUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVS

LUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBweCI+PC9URD48L1RSPg0K

ICA8VFIgDQogIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJU

SUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgUEFERElO

Ry1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRF

Ui1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHgiPg0KICAgIDxURCAN

CiAgICBzdHlsZT0iRk9OVC1TSVpFOiAxMHB4OyBCT1JERVItVE9QOiAwcHg7IEZPTlQtRkFNSUxZ

OiBpbmhlcml0OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IG1pZGRsZTsgQk9S

REVSLUJPVFRPTTogMHB4OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRP

UDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7

IExJTkUtSEVJR0hUOiAyMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IGZvbnQtc3RyZXRjaDogaW5o

ZXJpdDsgZm9udC1vcHRpY2FsLXNpemluZzogaW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhlcml0

OyBmb250LWZlYXR1cmUtc2V0dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFyaWF0aW9uLXNldHRpbmdz

OiBpbmhlcml0Ij48U1RST05HIA0KICAgICAgc3R5bGU9IkJPUkRFUi1UT1A6IDBweDsgRk9OVC1G

QU1JTFk6IGluaGVyaXQ7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxp

bmU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgRk9OVC1XRUlHSFQ6IGJvbGRlcjsgUEFE

RElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJP

UkRFUi1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IGZvbnQtc3Ry

ZXRjaDogaW5oZXJpdDsgZm9udC1vcHRpY2FsLXNpemluZzogaW5oZXJpdDsgZm9udC1rZXJuaW5n

OiBpbmhlcml0OyBmb250LWZlYXR1cmUtc2V0dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFyaWF0aW9u

LXNldHRpbmdzOiBpbmhlcml0Ij7jgZTnkIbop6PjgajjgZTljZTlipvjgpLjgYTjgZ/jgaDjgY3j

gIHoqqDjgavjgYLjgorjgYzjgajjgYbjgZTjgZbjgYTjgb7jgZnjgILku4rlvozjgajjgoLjgIFB

bWF6b27jga/jgYrlrqLmp5jjga7lronlhajjgajliKnkvr/mgKfjgpLnrKzkuIDjgavogIPjgYjj

gIHjgojjgoroia/jgYTjgrXjg7zjg5PjgrnjgpLmj5DkvpvjgZnjgovjgZ/jgoHjgavliqrlipvj

gZfjgabjgb7jgYTjgorjgb7jgZnjgII8L1NUUk9ORz48L1REPg0KICAgIDxURCANCiAgICBzdHls

ZT0iQk9SREVSLVRPUDogMHB4OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IG1p

ZGRsZTsgQk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQ

QURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFS

R0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBweCI+PC9URD48L1RSPg0KICA8VFIgDQogIHN0eWxl

PSJCT1JERVItVE9QOiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFz

ZWxpbmU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgUEFERElORy1CT1RUT006IDBweDsg

UEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1B

UkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHgiPg0KICAgIDxURCANCiAgICBzdHlsZT0iRk9O

VC1TSVpFOiAxMHB4OyBCT1JERVItVE9QOiAwcHg7IEZPTlQtRkFNSUxZOiBpbmhlcml0OyBCT1JE

RVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IG1pZGRsZTsgQk9SREVSLUJPVFRPTTogMHB4

OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5H

LUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IExJTkUtSEVJR0hUOiAy

MHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IGZvbnQtc3RyZXRjaDogaW5oZXJpdDsgZm9udC1vcHRp

Y2FsLXNpemluZzogaW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhlcml0OyBmb250LWZlYXR1cmUt

c2V0dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFyaWF0aW9uLXNldHRpbmdzOiBpbmhlcml0Ij48U1RS

T05HIA0KICAgICAgc3R5bGU9IkJPUkRFUi1UT1A6IDBweDsgRk9OVC1GQU1JTFk6IGluaGVyaXQ7

IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RU

T006IDBweDsgWk9PTTogMTsgRk9OVC1XRUlHSFQ6IGJvbGRlcjsgUEFERElORy1CT1RUT006IDBw

eDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7

IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IGZvbnQtc3RyZXRjaDogaW5oZXJpdDsg

Zm9udC1vcHRpY2FsLXNpemluZzogaW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhlcml0OyBmb250

LWZlYXR1cmUtc2V0dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFyaWF0aW9uLXNldHRpbmdzOiBpbmhl

cml0Ij7mlazlhbc8L1NUUk9ORz48L1REPg0KICAgIDxURCANCiAgICBzdHlsZT0iQk9SREVSLVRP

UDogMHB4OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IG1pZGRsZTsgQk9SREVS

LUJPVFRPTTogMHB4OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDog

MHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBB

RERJTkctUklHSFQ6IDBweCI+PC9URD48L1RSPg0KICA8VFIgDQogIHN0eWxlPSJCT1JERVItVE9Q

OiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRF

Ui1CT1RUT006IDBweDsgWk9PTTogMTsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6

IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBQ

QURESU5HLVJJR0hUOiAwcHgiPg0KICAgIDxURCANCiAgICBzdHlsZT0iRk9OVC1TSVpFOiAxMHB4

OyBCT1JERVItVE9QOiAwcHg7IEZPTlQtRkFNSUxZOiBpbmhlcml0OyBCT1JERVItUklHSFQ6IDBw

eDsgVkVSVElDQUwtQUxJR046IG1pZGRsZTsgQk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAxOyBQ

QURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsg

Qk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IExJTkUtSEVJR0hUOiAyMHB4OyBQQURESU5H

LVJJR0hUOiAwcHg7IGZvbnQtc3RyZXRjaDogaW5oZXJpdDsgZm9udC1vcHRpY2FsLXNpemluZzog

aW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhlcml0OyBmb250LWZlYXR1cmUtc2V0dGluZ3M6IGlu

aGVyaXQ7IGZvbnQtdmFyaWF0aW9uLXNldHRpbmdzOiBpbmhlcml0Ij48U1RST05HIA0KICAgICAg

c3R5bGU9IkJPUkRFUi1UT1A6IDBweDsgRk9OVC1GQU1JTFk6IGluaGVyaXQ7IEJPUkRFUi1SSUdI

VDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9P

TTogMTsgRk9OVC1XRUlHSFQ6IGJvbGRlcjsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1U

T1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1BUkdJTjogMHB4

OyBQQURESU5HLVJJR0hUOiAwcHg7IGZvbnQtc3RyZXRjaDogaW5oZXJpdDsgZm9udC1vcHRpY2Fs

LXNpemluZzogaW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhlcml0OyBmb250LWZlYXR1cmUtc2V0

dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFyaWF0aW9uLXNldHRpbmdzOiBpbmhlcml0Ij5BbWF6b27m

oKrlvI/kvJrnpL48L1NUUk9ORz48L1REPg0KICAgIDxURCANCiAgICBzdHlsZT0iQk9SREVSLVRP

UDogMHB4OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IG1pZGRsZTsgQk9SREVS

LUJPVFRPTTogMHB4OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDog

MHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBB

RERJTkctUklHSFQ6IDBweCI+PC9URD48L1RSPg0KICA8VFIgDQogIHN0eWxlPSJCT1JERVItVE9Q

OiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRF

Ui1CT1RUT006IDBweDsgWk9PTTogMTsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6

IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBQ

QURESU5HLVJJR0hUOiAwcHgiPg0KICAgIDxURCANCiAgICBzdHlsZT0iRk9OVC1TSVpFOiAxMHB4

OyBCT1JERVItVE9QOiAwcHg7IEZPTlQtRkFNSUxZOiBpbmhlcml0OyBCT1JERVItUklHSFQ6IDBw

eDsgVkVSVElDQUwtQUxJR046IG1pZGRsZTsgQk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAxOyBQ

QURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsg

Qk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IExJTkUtSEVJR0hUOiAyMHB4OyBQQURESU5H

LVJJR0hUOiAwcHg7IGZvbnQtc3RyZXRjaDogaW5oZXJpdDsgZm9udC1vcHRpY2FsLXNpemluZzog

aW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhlcml0OyBmb250LWZlYXR1cmUtc2V0dGluZ3M6IGlu

aGVyaXQ7IGZvbnQtdmFyaWF0aW9uLXNldHRpbmdzOiBpbmhlcml0Ij48U1RST05HIA0KICAgICAg

c3R5bGU9IkJPUkRFUi1UT1A6IDBweDsgRk9OVC1GQU1JTFk6IGluaGVyaXQ7IEJPUkRFUi1SSUdI

VDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9P

TTogMTsgRk9OVC1XRUlHSFQ6IGJvbGRlcjsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1U

T1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1BUkdJTjogMHB4

OyBQQURESU5HLVJJR0hUOiAwcHg7IGZvbnQtc3RyZXRjaDogaW5oZXJpdDsgZm9udC1vcHRpY2Fs

LXNpemluZzogaW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhlcml0OyBmb250LWZlYXR1cmUtc2V0

dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFyaWF0aW9uLXNldHRpbmdzOiBpbmhlcml0Ij7jgqvjgrnj

gr/jg57jg7zjgrXjg53jg7zjg4jpg6g8L1NUUk9ORz48L1REPg0KICAgIDxURCANCiAgICBzdHls

ZT0iQk9SREVSLVRPUDogMHB4OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IG1p

ZGRsZTsgQk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQ

QURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFS

R0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBweCI+PC9URD48L1RSPg0KICA8VFIgDQogIHN0eWxl

PSJCT1JERVItVE9QOiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFz

ZWxpbmU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgUEFERElORy1CT1RUT006IDBweDsg

UEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1B

UkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHgiPg0KICAgIDxURCANCiAgICBzdHlsZT0iQk9S

REVSLVRPUDogMHB4OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IG1pZGRsZTsg

Qk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5H

LVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAw

cHg7IFBBRERJTkctUklHSFQ6IDBweCIgDQogICAgYWxpZ249cmlnaHQ+PFNUUk9ORyANCiAgICAg

IHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEZPTlQtRkFNSUxZOiBpbmhlcml0OyBCT1JERVItUklH

SFQ6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NOiAwcHg7IFpP

T006IDE7IEZPTlQtV0VJR0hUOiBib2xkZXI7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkct

VE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46IDBw

eDsgUEFERElORy1SSUdIVDogMHB4OyBmb250LXN0cmV0Y2g6IGluaGVyaXQ7IGZvbnQtb3B0aWNh

bC1zaXppbmc6IGluaGVyaXQ7IGZvbnQta2VybmluZzogaW5oZXJpdDsgZm9udC1mZWF0dXJlLXNl

dHRpbmdzOiBpbmhlcml0OyBmb250LXZhcmlhdGlvbi1zZXR0aW5nczogaW5oZXJpdCI+DQogICAg

ICA8UCANCiAgICAgIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBW

RVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgUEFE

RElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJP

UkRFUi1MRUZUOiAwcHg7IE1BUkdJTjogMWVtIDBweDsgRElTUExBWTogYmxvY2s7IFBBRERJTkct

UklHSFQ6IDBweCI+44GT44Gu44Oh44O844Or44GvOjxBIA0KICAgICAgc3R5bGU9IlRFWFQtREVD

T1JBVElPTjogdW5kZXJsaW5lOyBCT1JERVItVE9QOiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBW

RVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgQ09M

T1I6IHJnYigwLDAsMjM4KTsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsg

UEFERElORy1MRUZUOiAxMHB4OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElO

Ry1SSUdIVDogMTBweDsgQkFDS0dST1VORC1DT0xPUjogdHJhbnNwYXJlbnQ7IHRyYW5zaXRpb246

IGFsbCAwLjFzIGVhc2UtaW4tb3V0IDBzIiANCiAgICAgIGhyZWY9Imh0dHBzOi8vbWFpbC5vY24u

anAvaW5kZXguaHRtbCMiPuW9ueOBq+eri+OBpDwvQT48U1BBTj4mbmJzcDs8L1NQQU4+fDxTUEFO

PiZuYnNwOzwvU1BBTj48QSANCiAgICAgIHN0eWxlPSJURVhULURFQ09SQVRJT046IHVuZGVybGlu

ZTsgQk9SREVSLVRPUDogMHB4OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IGJh

c2VsaW5lOyBCT1JERVItQk9UVE9NOiAwcHg7IFpPT006IDE7IENPTE9SOiByZ2IoMCwwLDIzOCk7

IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMTBw

eDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDEwcHg7IEJB

Q0tHUk9VTkQtQ09MT1I6IHRyYW5zcGFyZW50OyB0cmFuc2l0aW9uOiBhbGwgMC4xcyBlYXNlLWlu

LW91dCAwcyIgDQogICAgICBocmVmPSJodHRwczovL21haWwub2NuLmpwL2luZGV4Lmh0bWwjIj7l

vbnjgavnq4vjgZ/jgarjgYQ8L0E+PC9QPg0KICAgICAgPFAgDQogICAgICBzdHlsZT0iQk9SREVS

LVRPUDogMHB4OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5lOyBC

T1JERVItQk9UVE9NOiAwcHg7IFpPT006IDE7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkct

VE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46IDFl

bSAwcHg7IERJU1BMQVk6IGJsb2NrOyBQQURESU5HLVJJR0hUOiAwcHgiPjwvUD4NCiAgICAgIDxI

UiANCiAgICAgIHN0eWxlPSJCT1gtU0laSU5HOiBjb250ZW50LWJveDsgT1ZFUkZMT1c6IHZpc2li

bGU7IEhFSUdIVDogMHB4OyBaT09NOiAxIj4NCg0KICAgICAgPFAgDQogICAgICBzdHlsZT0iQk9S

REVSLVRPUDogMHB4OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5l

OyBCT1JERVItQk9UVE9NOiAwcHg7IFpPT006IDE7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJ

TkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46

IDFlbSAwcHg7IERJU1BMQVk6IGJsb2NrOyBQQURESU5HLVJJR0hUOiAwcHgiPjwvUD48L1NUUk9O

Rz48L1REPg0KICAgIDxURCANCiAgICBzdHlsZT0iQk9SREVSLVRPUDogMHB4OyBCT1JERVItUklH

SFQ6IDBweDsgVkVSVElDQUwtQUxJR046IG1pZGRsZTsgQk9SREVSLUJPVFRPTTogMHB4OyBaT09N

OiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6

IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBweCI+

PC9URD48L1RSPg0KICA8VFIgDQogIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEhFSUdIVDogNzAw

cHg7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1C

T1RUT006IDBweDsgWk9PTTogMTsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBw

eDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBQQURE

SU5HLVJJR0hUOiAwcHgiPg0KICAgIDxURCANCiAgICBzdHlsZT0iQk9SREVSLVRPUDogMHB4OyBI

RUlHSFQ6IDcwMHB4OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElDQUwtQUxJR046IG1pZGRsZTsg

Qk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5H

LVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAw

cHg7IFBBRERJTkctUklHSFQ6IDBweCI+DQogICAgICA8UCANCiAgICAgIHN0eWxlPSJCT1JERVIt

VE9QOiAwcHg7IEhFSUdIVDogNzAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElH

TjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgUEFERElORy1CT1RUT006

IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAw

cHg7IE1BUkdJTjogMWVtIDBweDsgRElTUExBWTogYmxvY2s7IFBBRERJTkctUklHSFQ6IDBweCI+

PC9QPjwvVEQ+DQogICAgPFREIA0KICAgIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEJPUkRFUi1S

SUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogbWlkZGxlOyBCT1JERVItQk9UVE9NOiAwcHg7IFpP

T006IDE7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVG

VDogMHB4OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4

Ij48L1REPjwvVFI+DQogIDxUUiANCiAgc3R5bGU9IkJPUkRFUi1UT1A6IDBweDsgQk9SREVSLVJJ

R0hUOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsgQk9SREVSLUJPVFRPTTogMHB4OyBa

T09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxF

RlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBw

eCI+DQogICAgPFREIA0KICAgIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEJPUkRFUi1SSUdIVDog

MHB4OyBWRVJUSUNBTC1BTElHTjogbWlkZGxlOyBCT1JERVItQk9UVE9NOiAwcHg7IFpPT006IDE7

IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4

OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4Ij48U1RS

T05HIA0KICAgICAgc3R5bGU9IkJPUkRFUi1UT1A6IDBweDsgRk9OVC1GQU1JTFk6IGluaGVyaXQ7

IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RU

T006IDBweDsgWk9PTTogMTsgRk9OVC1XRUlHSFQ6IGJvbGRlcjsgUEFERElORy1CT1RUT006IDBw

eDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAwcHg7

IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IGZvbnQtc3RyZXRjaDogaW5oZXJpdDsg

Zm9udC1vcHRpY2FsLXNpemluZzogaW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhlcml0OyBmb250

LWZlYXR1cmUtc2V0dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFyaWF0aW9uLXNldHRpbmdzOiBpbmhl

cml0Ij5BIA0KICAgICAgY29tcGFyaXNvbiBvZiB0d28gY29tcGxldGUgc2V0cyBvZiBodW1hbiBj

ZW50cm9tZXJlcyByZXZlYWxzIHRoYXQgdGhlIA0KICAgICAgY2VudHJvbWVyZXMgc2hvdyBhdCBs

ZWFzdCBhIDQuMS1mb2xkIGluY3JlYXNlIGluIHNpbmdsZS1udWNsZW90aWRlIA0KICAgICAgdmFy

aWF0aW9uIGNvbXBhcmVkIHdpdGggdGhlaXIgdW5pcXVlIGZsYW5rcywgYW5kIHVwIHRvIDMtZm9s

ZCB2YXJpYXRpb24gaW4gDQogICAgICBzaXplLCByZXN1bHRpbmcgZnJvbSBhbiBhY2NlbGVyYXRl

ZCBtdXRhdGlvbiByYXRlLjwvU1RST05HPjwvVEQ+DQogICAgPFREIA0KICAgIHN0eWxlPSJCT1JE

RVItVE9QOiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogbWlkZGxlOyBC

T1JERVItQk9UVE9NOiAwcHg7IFpPT006IDE7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkct

VE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46IDBw

eDsgUEFERElORy1SSUdIVDogMHB4Ij48L1REPjwvVFI+DQogIDxUUiANCiAgc3R5bGU9IkJPUkRF

Ui1UT1A6IDBweDsgQk9SREVSLVJJR0hUOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsg

Qk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5H

LVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAw

cHg7IFBBRERJTkctUklHSFQ6IDBweCI+DQogICAgPFREIA0KICAgIHN0eWxlPSJCT1JERVItVE9Q

OiAwcHg7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogbWlkZGxlOyBCT1JERVIt

Qk9UVE9NOiAwcHg7IFpPT006IDE7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAw

cHg7IFBBRERJTkctTEVGVDogMHB4OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFE

RElORy1SSUdIVDogMHB4Ij48U1RST05HIA0KICAgICAgc3R5bGU9IkJPUkRFUi1UT1A6IDBweDsg

Rk9OVC1GQU1JTFk6IGluaGVyaXQ7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjog

YmFzZWxpbmU7IEJPUkRFUi1CT1RUT006IDBweDsgWk9PTTogMTsgRk9OVC1XRUlHSFQ6IGJvbGRl

cjsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAw

cHg7IEJPUkRFUi1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IGZv

bnQtc3RyZXRjaDogaW5oZXJpdDsgZm9udC1vcHRpY2FsLXNpemluZzogaW5oZXJpdDsgZm9udC1r

ZXJuaW5nOiBpbmhlcml0OyBmb250LWZlYXR1cmUtc2V0dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFy

aWF0aW9uLXNldHRpbmdzOiBpbmhlcml0Ij5TY2llbnRpc3RzIA0KICAgICAgaGF2ZSBkZXNpZ25l

ZCBhIGxpcXVpZCB0aGF0IGJlaGF2ZXMgYXMgYm90aCBhIHNvbGlkIGFuZCBhIGZsdWlkIG93aW5n

IHRvIA0KICAgICAgdGhlIHByZXNlbmNlIG9mIHRpbnkgZ2FzLWZpbGxlZCBjYXBzdWxlcy4gQW4g

dW51c3VhbCByZWxhdGlvbnNoaXAgYmV0d2VlbiANCiAgICAgIHByZXNzdXJlIGFuZCB2b2x1bWUg

ZW5hYmxlcyB0aGlzIG1hdGVyaWFsIHRvIGdyYXNwIGZyYWdpbGUgDQogICAgICBvYmplY3RzLjwv

U1RST05HPjwvVEQ+DQogICAgPFREIA0KICAgIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEJPUkRF

Ui1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogbWlkZGxlOyBCT1JERVItQk9UVE9NOiAwcHg7

IFpPT006IDE7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkct

TEVGVDogMHB4OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDog

MHB4Ij48L1REPjwvVFI+DQogIDxUUiANCiAgc3R5bGU9IkJPUkRFUi1UT1A6IDBweDsgQk9SREVS

LVJJR0hUOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsgQk9SREVSLUJPVFRPTTogMHB4

OyBaT09NOiAxOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5H

LUxFRlQ6IDBweDsgQk9SREVSLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6

IDBweCI+DQogICAgPFREIA0KICAgIHN0eWxlPSJCT1JERVItVE9QOiAwcHg7IEJPUkRFUi1SSUdI

VDogMHB4OyBWRVJUSUNBTC1BTElHTjogbWlkZGxlOyBCT1JERVItQk9UVE9NOiAwcHg7IFpPT006

IDE7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDog

MHB4OyBCT1JERVItTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4Ij48

U1RST05HIA0KICAgICAgc3R5bGU9IkJPUkRFUi1UT1A6IDBweDsgRk9OVC1GQU1JTFk6IGluaGVy

aXQ7IEJPUkRFUi1SSUdIVDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1C

T1RUT006IDBweDsgWk9PTTogMTsgRk9OVC1XRUlHSFQ6IGJvbGRlcjsgUEFERElORy1CT1RUT006

IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IEJPUkRFUi1MRUZUOiAw

cHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IGZvbnQtc3RyZXRjaDogaW5oZXJp

dDsgZm9udC1vcHRpY2FsLXNpemluZzogaW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhlcml0OyBm

b250LWZlYXR1cmUtc2V0dGluZ3M6IGluaGVyaXQ7IGZvbnQtdmFyaWF0aW9uLXNldHRpbmdzOiBp

bmhlcml0Ij5HZW5ldGljIA0KICAgICAgdmFyaWFudHMgY29udHJpYnV0ZSB0byB0aGUgcmlzayBv

ZiBkZXZlbG9waW5nIGNlcnRhaW4gZGlzZWFzZXMsIGJ1dCANCiAgICAgIGlkZW50aWZ5aW5nIHRo

ZSBnZW5lcyBhbmQgbW9sZWN1bGFyIHBhdGh3YXlzIHVuZGVyIHRoZWlyIGNvbnRyb2wgaGFzIGJl

ZW4gDQogICAgICBkaWZmaWN1bHQuIE5vdywgYSBzeXN0ZW1hdGljIGFwcHJvYWNoIHRvIHBpbnBv

aW50aW5nIHRoZXNlIGZhY3RvcnMgeWllbGRzIA0KICAgICAgaW5zaWdodHMgaW50byBob3cgYSBz

cGVjaWZpYyBwYXRod2F5IGluIGVuZG90aGVsaWFsIGNlbGxzIGluZmx1ZW5jZXMgdGhlIA0KICAg

ICAgcmlzayBvZiBjb3JvbmFyeSBhcnRlcnkgZGlzZWFzZS48L1NUUk9ORz48L1REPg0KICAgIDxU

RCANCiAgICBzdHlsZT0iQk9SREVSLVRPUDogMHB4OyBCT1JERVItUklHSFQ6IDBweDsgVkVSVElD

QUwtQUxJR046IG1pZGRsZTsgQk9SREVSLUJPVFRPTTogMHB4OyBaT09NOiAxOyBQQURESU5HLUJP

VFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgQk9SREVSLUxF

RlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBweCI+PC9URD48L1RSPjwvVEJP

RFk+PC9UQUJMRT48L0JPRFk+PC9IVE1MPg==



--===============0775110591==--



McAfee Phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 31 Oct 2024 13:21:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6aig-0000000096D-28cB

for dave@doctor.nl2k.ab.ca;

Thu, 31 Oct 2024 13:20:34 -0600

Resent-From: The Doctor

Resent-Date: Thu, 31 Oct 2024 13:20:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f177.google.com ([209.85.214.177]:44471)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Y2v-00000000PdG-1PBy

for doctor@doctor.nl2k.ab.ca;

Thu, 31 Oct 2024 10:29:23 -0600

Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-20cdbe608b3so12101675ad.1

for ; Thu, 31 Oct 2024 09:29:16 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1730392151; x=1730996951; darn=doctor.nl2k.ab.ca;

h=priority:importance:subject:from:to:mime-version:date:message-id

:from:to:cc:subject:date:message-id:reply-to;

bh=mCW1ucv2dZcIHWdmBmeEf+9tAwZG4dxsZFM6q3CVA0M=;

b=NVtQ4KmuHNeCE9vRKyFCRjGZ9WO+s/c0A+co+72TSjp6FJO8zTBxwZD4Mwk0nEmfSQ

atIBiDGKHKS5tinabRNuy8rXhIkJsm6BGolfjLmPIjAbE7A6pCg7z/U8lJer6rBi+0+d

EjknKfIrAeqGbfNWp8XfET+2AqfhdFQIykJiPbuIIqxKOeryO5zocohP1rTZnB9hItr5

ZZUnqlc+tWRN+A6JUly28GiF/Q7Q53UQbcuYLPbiEQefzKQUAL9XZI2Arn5vHVB+AMAo

mPmC8oIwNBPyohT4FzkhVpT16zDxjBIiAMpW5Tl1fWZjbf4dtJuyg0TejAIcTIORRk4s

RLMw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1730392151; x=1730996951;

h=priority:importance:subject:from:to:mime-version:date:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=mCW1ucv2dZcIHWdmBmeEf+9tAwZG4dxsZFM6q3CVA0M=;

b=pm7rM/hahKSIJZMEdJ1FYkPXhBB0DfvqOEsaXcFZfgjUzVuGMxWeOgJ5C2hfGZdBjw

ghZ/GzW3s1/kwgGS9ElOIrjr2prt6kw5Nv4feQvht0M50+HhFZ44Bd9fNGEEhn+GG3yQ

MbJg0kg2Osy2sFqtRiWFLf3U8IjPeUUk13gOwFwfQMvZMZqf0dZGCIk5eUOUzPYfCqJu

fQsCdPAoJ4mtEPPD1NULgOzW3I9m3k2PUkPK7NOah3YZdVS6qBZ9HBiOfbuFC4NtngBB

HlpuerUBQ2un4VzeH/FchuXznr9lU5F5mUuhHA/O+jTLwHGpdeLUqFIhmFYzKlIEEtoD

0pIg==

X-Gm-Message-State: AOJu0Yw+Q/zLd6+XI9TWjEFAyxIMXOV3uu6XcQALfZyFEkIlwA36iJpu

d9yxapwytche8V4sfQCICvr+wLxE8V2jXxa2g1466tuv9WpWX0Rvep1xX5DuSvQ=

X-Google-Smtp-Source: AGHT+IG3muExiER+TXPVN22yOLDA23T33soIcmN47MVJpWSLvXGMmeMX1Ifmp3M5Cx0S/SRizUP9ew==

X-Received: by 2002:a17:902:eccd:b0:20b:6e74:b712 with SMTP id d9443c01a7336-210f76d66cemr113004575ad.45.1730392150801;

Thu, 31 Oct 2024 09:29:10 -0700 (PDT)

Received: from [172.22.16.183] ([43.134.126.112])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-211055b9ef8sm10724935ad.0.2024.10.31.09.29.09

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Thu, 31 Oct 2024 09:29:10 -0700 (PDT)

Message-ID: <6723b056.170a0220.1ae60e.6079@mx.google.com>

Date: Thu, 31 Oct 2024 09:29:10 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============6966733770115985825=="

MIME-Version: 1.0

to: doctor

from: Luz Walsh

subject: Hi doctor, 065002 is your recent order number.

Importance: normal

Priority: normal

X-Mailer: X-Mailer NebulaMessenger [v2.0]

X-MimeOLE: GalacticMessenger 2.x

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey doctor, Friendly reminder: Today’s the renewal date

for your subscription, with the charge processed soon. Let us know if we can

help! Invoice Details



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[43.134.126.112 listed in dnsbl.ahbl.org]

[43.134.126.112 listed in dnsbl.ahbl.org]

[43.134.126.112 listed in dnsbl.ahbl.org]

[43.134.126.112 listed in dnsbl.ahbl.org]

[209.85.214.177 listed in dnsbl.ahbl.org]

[209.85.214.177 listed in dnsbl.ahbl.org]

[209.85.214.177 listed in dnsbl.ahbl.org]

[209.85.214.177 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[43.134.126.112 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[43.134.126.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[43.134.126.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[43.134.126.112 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[43.134.126.112 listed in will-spam-for-food.eu.org]

[43.134.126.112 listed in will-spam-for-food.eu.org]

[43.134.126.112 listed in will-spam-for-food.eu.org]

[43.134.126.112 listed in will-spam-for-food.eu.org]

[43.134.126.112 listed in will-spam-for-food.eu.org]

[43.134.126.112 listed in will-spam-for-food.eu.org]

[43.134.126.112 listed in will-spam-for-food.eu.org]

[43.134.126.112 listed in will-spam-for-food.eu.org]

[209.85.214.177 listed in will-spam-for-food.eu.org]

[209.85.214.177 listed in will-spam-for-food.eu.org]

[209.85.214.177 listed in will-spam-for-food.eu.org]

[209.85.214.177 listed in will-spam-for-food.eu.org]

[209.85.214.177 listed in will-spam-for-food.eu.org]

[209.85.214.177 listed in will-spam-for-food.eu.org]

[209.85.214.177 listed in will-spam-for-food.eu.org]

[209.85.214.177 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

[Error: open resolver; ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[209.85.214.177 listed in sbl-xbl.spamhaus.org]

[43.134.126.112 listed in sbl-xbl.spamhaus.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.177 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ra5yudj(at)gmail.com]

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Hi doctor, 065002 is your recent order number.



--===============6966733770115985825==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



SGV5IGRvY3RvciwKCkZyaWVuZGx5IHJlbWluZGVyOiBUb2RheeKAmXMgdGhlIHJlbmV3YWwgZGF0

ZSBmb3IgeW91ciBzdWJzY3JpcHRpb24sIHdpdGggdGhlIGNoYXJnZSBwcm9jZXNzZWQgc29vbi4g

TGV0IHVzIGtub3cgaWYgd2UgY2FuIGhlbHAhCgpJbnZvaWNlIERldGFpbHMKCkludm9pY2UgRGF0

ZTogRnJpZGF5LCBOb3ZlbWJlciAwMSwgMjAyNApTZXJ2aWNlOiBNY0FmZWUgTVZJU0lPTiBJbnNp

Z2h0cwpEdXJhdGlvbjogNSB5ZWFycwpBbW91bnQ6ICQgNTY2LjQ4ClBheW1lbnQgU3RhdHVzOiBD

b25maXJtZWQKQ3VzdG9tZXIgSUQ6IFFBSC0yMjAtRFktMDA0NgoKSWYgY2FuY2VsaW5nIGlzIG9u

IHlvdXIgbWluZCwgY2FsbCB1cyBhdCArMSg1MTgpIDgyMy0zMzkwLiBXZeKAmXJlIGhlcmUgdG8g

aGVscC4gVGhhbmsgeW91IGZvciBiZWluZyB3aXRoIHVzIQoKVGhhbmtmdWxseSwsCkZpbmFuY2Ug

SGVhZCBvZiBNY0FmZWUsIExMQy4uIEFsbCByaWdodHMgcmVzZXJ2ZWQuCjM0MzUgQXNoIERyLCBT

YW4gRGllZ28sIENBIDkyMTAyCkhlbHAgU29sdXRpb25zIERlc2sgKzEoNTE4KSA4MjMtMzM5MA==



--===============6966733770115985825==--

Japanese Amazon Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 31 Oct 2024 04:53:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6SnU-00000000KMU-4Bzf

for dave@doctor.nl2k.ab.ca;

Thu, 31 Oct 2024 04:53:01 -0600

Resent-From: The Doctor

Resent-Date: Thu, 31 Oct 2024 04:52:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [175.165.182.218] (port=64264 helo=costcojapan.jp)

by doctor.nl2k.ab.ca with smtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6SCi-00000000367-2SmH

for doctor@netknow.ca;

Thu, 31 Oct 2024 04:16:41 -0600

Content-Type: multipart/alternative; boundary="===============2099682028=="

MIME-Version: 1.0

Message-ID:

From: =?utf-8?q?=3C!DOCTYPE_HTML_PUBLIC_=22-//W3C//DTD_HTML_4=2E0_Transitional//EN?=

=?utf-8?q?=22=3E?=

To: =?utf-8?q?doctor=40netknow=2Eca?=

Subject: =?utf-8?b?PEhUTUw+PEhFQUQ+?=

Date: Thu, 31 Oct 2024 10:15:01 GMT

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 20.1

X-Spam_score_int: 201

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ** あなたのアカウントは停止されました** ##

アカウントセキュリティ通知 尊敬なる Amazon ユーザー様、





Content analysis details: (20.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[175.165.182.218 listed in dnsbl.ahbl.org]

[175.165.182.218 listed in dnsbl.ahbl.org]

[175.165.182.218 listed in dnsbl.ahbl.org]

[175.165.182.218 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[175.165.182.218 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[175.165.182.218 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[175.165.182.218 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[175.165.182.218 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[175.165.182.218 listed in bb.barracudacentral.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[175.165.182.218 listed in sbl-xbl.spamhaus.org]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: amazon.palomafantini.com]

[URI: amazon.co.jp]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[175.165.182.218 listed in will-spam-for-food.eu.org]

[175.165.182.218 listed in will-spam-for-food.eu.org]

[175.165.182.218 listed in will-spam-for-food.eu.org]

[175.165.182.218 listed in will-spam-for-food.eu.org]

[175.165.182.218 listed in will-spam-for-food.eu.org]

[175.165.182.218 listed in will-spam-for-food.eu.org]

[175.165.182.218 listed in will-spam-for-food.eu.org]

[175.165.182.218 listed in will-spam-for-food.eu.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: amazon.co.jp/52.119.168.48]

[URI: amazon.co.jp/52.119.164.121]

[URI: amazon.co.jp/52.119.161.5]

[URI: ns1.amzndns.co.uk/156.154.67.10]

[URI: ns1.amzndns.com/156.154.64.10]

[URI: ns1.amzndns.net/156.154.65.10]

[URI: ns2.amzndns.co.uk/204.74.120.1]

[URI: ns2.amzndns.com/156.154.68.10]

[URI: ns2.amzndns.net/156.154.69.10]

[URI: ns2.amzndns.org/156.154.150.1]

[URI: amazon.palomafantini.com/104.21.42.209]

[URI: miki.ns.cloudflare.com/108.162.192.202]

[URI: miki.ns.cloudflare.com/173.245.58.202]

[URI: miki.ns.cloudflare.com/172.64.32.202]

[URI: miles.ns.cloudflare.com/173.245.59.207]

[URI: miles.ns.cloudflare.com/172.64.33.207]

[URI: miles.ns.cloudflare.com/108.162.193.207]

[URI: ns1.amzndns.org/156.154.66.10]

[URI: amazon.palomafantini.com/172.67.166.75]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

1.0 FROM_INVALID No description available.

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

1.9 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers

Subject: {SPAM?} =?utf-8?b?PEhUTUw+PEhFQUQ+?=



--===============2099682028==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



KiogIArjgYLjgarjgZ/jga7jgqLjgqvjgqbjg7Pjg4jjga/lgZzmraLjgZXjgozjgb7jgZfjgZ8q

KgoKIyMg44Ki44Kr44Km44Oz44OI44K744Kt44Ol44Oq44OG44Kj6YCa55+lCgrlsIrmlazjgarj

gosgQW1hem9uIOODpuODvOOCtuODvOanmOOAgQoK44GK5a6i5qeY44Gu44Ki44Kr44Km44Oz44OI

44Gr6Zai44GX44Gm44CB5Lul5LiL44Gu55Ww5bi444Gq5rS75YuV44GM5qSc5Ye644GV44KM44G+

44GX44Gf77yaCgogICog5paw44GX44GE44OH44OQ44Kk44K544GL44KJ44Gu44Ki44Kr44Km44Oz

44OI44K144O844OT44K544G444Gu44K144Kk44Oz44Kk44OzIAogICog5Yil44Gu44OH44OQ44Kk

44K544GL44KJ44Gu6LO85YWl6Kmm6KGMCgrjgYrlrqLmp5jjga7jgqLjgqvjgqbjg7Pjg4jjgpLk

v53orbfjgZnjgovjgZ/jgoHjgIHjgrvjgq3jg6Xjg6rjg4bjgqPkuIrjga7nkIbnlLHjgavjgojj

gorkuIDpg6jjga7mqZ/og73jgpLkuIDmmYLnmoTjgavliLbpmZDjgZXjgZvjgabjgYTjgZ/jgaDj

gY3jgb7jgZfjgZ/jgIIKCiAgClvnorroqo3nlKjjgqLjgqvjgqbjg7Pjg4hdKGh0dHBzOi8vYW1h

em9uLnBhbG9tYWZhbnRpbmkuY29tL096Z0pIZykgIAotLS0gIAogIAoyNOaZgumWk+S7peWGheOB

q+S7peS4i+OBruaJi+mghuOCkuWujOS6huOBl+OBpuOBj+OBoOOBleOBhO+8mgoKICAxLiDmnIDo

v5Hjga7jgqLjgqvjgqbjg7Pjg4jmtLvli5XjgpLnorroqo0gCiAgMi4g5LiN5a+p44Gq5Y+W5byV

44KS55m66KaL44GX44Gf5aC05ZCI44Gv44CB55u044Gh44Gr44Kr44K544K/44Oe44O844K144O8

44OT44K544G+44Gn44GU6YCj57Wh44GP44Gg44GV44GECgoqKuOBlOazqOaEj++8mioqCgogICog

44GU5LiN5piO44Gq54K544GM44GU44GW44GE44G+44GX44Gf44KJ44CBQW1hem9uIOOBruWFrOW8

j+OCq+OCueOCv+ODnuODvOOCteODvOODk+OCueOBvuOBp+OBiuWVj+OBhOWQiOOCj+OBm+OBj+OB

oOOBleOBhOOAggoK44GK5a6i5qeY44Gu44Ki44Kr44Km44Oz44OI44Gu5a6J5YWo44KS5a6I44KL

44GT44Go44GM5oiR44CF44Gu5pyA5YSq5YWI5LqL6aCF44Gn44GZ44CC44GU55CG6Kej44Go44GU

5Y2U5Yqb44Gr5oSf6Kyd55Sz44GX5LiK44GS44G+44GZ44CCCgpBbWF6b24g44Kr44K544K/44Oe

44O844K144O844OT44K544OB44O844OgCgpBbWF6b24uY28uanAgQW1hem9u44Ki44Kr44Km44Oz

44OI44Gu5LiN5a+p44Gq5rS75YuV44Gr6Zai44GZ44KL44K744Kt44Ol44Oq44OG44Kj6YCa55+l

CgrCqSAyMDI0IEFtYXpvbi5jb20sIEluYy4g44G+44Gf44Gv44Gd44Gu6Zai6YCj5Lya56S+44CC

QWxsIHJpZ2h0cyByZXNlcnZlZC4KCkFtYXpvbuOAgUFtYXpvbi5jby5qcOOAgUFtYXpvbiBQcmlt

ZeOAgVByaW1lIOOBiuOCiOOBsyBBbWF6b24uY28uanAg44Gu44Ot44K044GvIEFtYXpvbi5jb20s

IEluYy4K44G+44Gf44Gv44Gd44Gu6Zai6YCj5Lya56S+44Gu5ZWG5qiZ44Gn44GZ44CCCgrjg63j

grDjgqTjg7MgfCDjg6Hjg7zjg6vjga7phY3kv6HlgZzmraLoqK3lrpoKCsKpIDIwMjQgRnVvY3R0

Z21rQm9JYkZ1b2N0dGdta0JvSWIuIEFsbCBSaWdodHMgUmVzZXJ2ZWQuCgogIAogIAogIAogIAoK



--===============2099682028==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PE1FVEEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04IiBodHRwLWVxdWl2PUNvbnRl

bnQtVHlwZT4NCjxNRVRBIG5hbWU9R0VORVJBVE9SIGNvbnRlbnQ9Ik1TSFRNTCAxMS4wMC4xMDU3

MC4xMDAxIj48L0hFQUQ+DQo8Qk9EWT4NCjxESVYgDQpzdHlsZT0iRk9OVC1TSVpFOiAxM3B4OyBG

T05ULUZBTUlMWTog5b6u6L2v6ZuF6buROyBXSElURS1TUEFDRTogbm9ybWFsOyBXT1JELVNQQUNJ

Tkc6IDBweDsgVEVYVC1UUkFOU0ZPUk06IG5vbmU7IEZPTlQtV0VJR0hUOiA0MDA7IENPTE9SOiBy

Z2IoMCwwLDApOyBGT05ULVNUWUxFOiBub3JtYWw7IE9SUEhBTlM6IDI7IFdJRE9XUzogMjsgTEVU

VEVSLVNQQUNJTkc6IG5vcm1hbDsgQkFDS0dST1VORC1DT0xPUjogcmdiKDI1NSwyNTUsMjU1KTsg

VEVYVC1JTkRFTlQ6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRl

Y29yYXRpb24tdGhpY2tuZXNzOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tc3R5bGU6IGluaXRp

YWw7IHRleHQtZGVjb3JhdGlvbi1jb2xvcjogaW5pdGlhbDsgZm9udC12YXJpYW50LWxpZ2F0dXJl

czogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsIj4NCjxESVYgDQpzdHlsZT0iQk9S

REVSLVRPUDogcmdiKDEyMywxNjQsMjI0KSAxcHQgc29saWQ7IFBPU0lUSU9OOiBzdGF0aWMgIWlt

cG9ydGFudDsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDEwcHg7IFBBRERJTkct

TEVGVDogMHB4OyBQQURESU5HLVJJR0hUOiAwcHgiPg0KPERJViANCnN0eWxlPSJDT0xPUjogd2hp

dGU7IFBBRERJTkctQk9UVE9NOiAyMHB4OyBURVhULUFMSUdOOiBjZW50ZXI7IFBBRERJTkctVE9Q

OiAyMHB4OyBQQURESU5HLUxFRlQ6IDIwcHg7IFBBRERJTkctUklHSFQ6IDIwcHg7IEJBQ0tHUk9V

TkQtQ09MT1I6IHJnYigzNSw0Nyw2MikiPg0KPFAgc3R5bGU9IldISVRFLVNQQUNFOiBub3JtYWw7

IE1BUkdJTjogMHB4Ij48Rk9OVCBzdHlsZT0iV0hJVEUtU1BBQ0U6IG5vcm1hbCIgDQpmYWNlPSJZ

dSBHb3RoaWMiPjxTVFJPTkcgc3R5bGU9IldISVRFLVNQQUNFOiBub3JtYWwiPjxCUiANCmNsYXNz

PUFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmU+44GC44Gq44Gf44Gu44Ki44Kr44Km44Oz44OI44Gv

5YGc5q2i44GV44KM44G+44GX44GfPC9TVFJPTkc+PC9GT05UPjwvUD48L0RJVj4NCjxESVYgDQpz

dHlsZT0iQk9SREVSLVRPUDogcmdiKDIyMSwyMjEsMjIxKSAxcHggc29saWQ7IEJPUkRFUi1SSUdI

VDogcmdiKDIyMSwyMjEsMjIxKSAxcHggc29saWQ7IE1BUkdJTi1UT1A6IDIwcHg7IEJPUkRFUi1C

T1RUT006IHJnYigyMjEsMjIxLDIyMSkgMXB4IHNvbGlkOyBQQURESU5HLUJPVFRPTTogMjBweDsg

UEFERElORy1UT1A6IDIwcHg7IFBBRERJTkctTEVGVDogMjBweDsgQk9SREVSLUxFRlQ6IHJnYigy

MjEsMjIxLDIyMSkgMXB4IHNvbGlkOyBQQURESU5HLVJJR0hUOiAyMHB4OyBCQUNLR1JPVU5ELUNP

TE9SOiByZ2IoMjQ4LDI0OCwyNDgpIj4NCjxIMiBzdHlsZT0iQ09MT1I6IHJnYigyNTUsMTUzLDAp

Ij7jgqLjgqvjgqbjg7Pjg4jjgrvjgq3jg6Xjg6rjg4bjgqPpgJrnn6U8L0gyPg0KPFAgc3R5bGU9

Ik1BUkdJTjogMHB4Ij7lsIrmlazjgarjgosgQW1hem9uIOODpuODvOOCtuODvOanmOOAgTwvUD4N

CjxQIHN0eWxlPSJNQVJHSU46IDBweCI+44GK5a6i5qeY44Gu44Ki44Kr44Km44Oz44OI44Gr6Zai

44GX44Gm44CB5Lul5LiL44Gu55Ww5bi444Gq5rS75YuV44GM5qSc5Ye644GV44KM44G+44GX44Gf

77yaPC9QPg0KPFVMIHN0eWxlPSJMSVNULVNUWUxFLVBPU0lUSU9OOiBpbnNpZGUiPg0KICA8TEk+

5paw44GX44GE44OH44OQ44Kk44K544GL44KJ44Gu44Ki44Kr44Km44Oz44OI44K144O844OT44K5

44G444Gu44K144Kk44Oz44Kk44OzIA0KICA8TEk+5Yil44Gu44OH44OQ44Kk44K544GL44KJ44Gu

6LO85YWl6Kmm6KGMPC9MST48L1VMPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij7jgYrlrqLmp5jj

ga7jgqLjgqvjgqbjg7Pjg4jjgpLkv53orbfjgZnjgovjgZ/jgoHjgIHjgrvjgq3jg6Xjg6rjg4bj

gqPkuIrjga7nkIbnlLHjgavjgojjgorkuIDpg6jjga7mqZ/og73jgpLkuIDmmYLnmoTjgavliLbp

mZDjgZXjgZvjgabjgYTjgZ/jgaDjgY3jgb7jgZfjgZ/jgII8L1A+DQo8RElWIHN0eWxlPSJXSElU

RS1TUEFDRTogbm9ybWFsIiBhbGlnbj1jZW50ZXI+PEJSIHN0eWxlPSJXSElURS1TUEFDRTogbm9y

bWFsIj4NCjxUQUJMRSBpZD1fY2lkMC42OTA1MzExNTgxNzA4MTQgDQpzdHlsZT0iQk9SREVSLUxF

RlQtV0lEVEg6IDFweDsgQk9SREVSLVJJR0hULVdJRFRIOiAxcHg7IFdISVRFLVNQQUNFOiBub3Jt

YWw7IEJPUkRFUi1CT1RUT00tV0lEVEg6IDFweDsgQk9SREVSLUNPTExBUFNFOiBzZXBhcmF0ZTsg

Qk9SREVSLVRPUC1XSURUSDogMXB4OyBCQUNLR1JPVU5ELUNPTE9SOiByZ2IoMjU1LDE2NywzNSki

IA0KY2VsbFNwYWNpbmc9MCBjZWxsUGFkZGluZz0wIGFsaWduPWNlbnRlciBib3JkZXI9MD4NCiAg

PFRCT0RZIHN0eWxlPSJXSElURS1TUEFDRTogbm9ybWFsIj4NCiAgPFRSIHN0eWxlPSJXSElURS1T

UEFDRTogbm9ybWFsIj4NCiAgICA8VEQgDQogICAgc3R5bGU9IkZPTlQtU0laRTogMTZweDsgRk9O

VC1GQU1JTFk6IEFyaWFsOyBXSElURS1TUEFDRTogbm9ybWFsOyBQQURESU5HLUJPVFRPTTogMTVw

eDsgUEFERElORy1UT1A6IDE1cHg7IFBBRERJTkctTEVGVDogMjVweDsgUEFERElORy1SSUdIVDog

MjVweCIgDQogICAgdkFsaWduPW1pZGRsZSBhbGlnbj1jZW50ZXI+PEEgDQogICAgICBzdHlsZT0i

VEVYVC1ERUNPUkFUSU9OOiBub25lOyBXSElURS1TUEFDRTogbm9ybWFsOyBGT05ULVdFSUdIVDog

Ym9sZDsgQ09MT1I6IHJnYigyNTUsMjU1LDI1NSk7IFRFWFQtQUxJR046IGNlbnRlcjsgTEVUVEVS

LVNQQUNJTkc6IG5vcm1hbDsgTElORS1IRUlHSFQ6IDE2cHgiIA0KICAgICAgaHJlZj0iaHR0cHM6

Ly9hbWF6b24ucGFsb21hZmFudGluaS5jb20vT3pnSkhnIiB0YXJnZXQ9X2JsYW5rPueiuuiqjeeU

qOOCouOCq+OCpuODs+ODiDwvQT48L1REPjwvVFI+PC9UQk9EWT48L1RBQkxFPjwvRElWPg0KPFAg

c3R5bGU9Ik1BUkdJTjogMHB4Ij4yNOaZgumWk+S7peWGheOBq+S7peS4i+OBruaJi+mghuOCkuWu

jOS6huOBl+OBpuOBj+OBoOOBleOBhO+8mjwvUD4NCjxPTCBzdHlsZT0iTElTVC1TVFlMRS1QT1NJ

VElPTjogaW5zaWRlIj4NCiAgPExJPuacgOi/keOBruOCouOCq+OCpuODs+ODiOa0u+WLleOCkuei

uuiqjSANCiAgPExJPuS4jeWvqeOBquWPluW8leOCkueZuuimi+OBl+OBn+WgtOWQiOOBr+OAgeeb

tOOBoeOBq+OCq+OCueOCv+ODnuODvOOCteODvOODk+OCueOBvuOBp+OBlOmAo+e1oeOBj+OBoOOB

leOBhDwvTEk+PC9PTD4NCjxESVYgDQpzdHlsZT0iUEFERElORy1CT1RUT006IDEwcHg7IFBBRERJ

TkctVE9QOiAxMHB4OyBQQURESU5HLUxFRlQ6IDEwcHg7IEJPUkRFUi1MRUZUOiByZ2IoMjU1LDE1

MywwKSA1cHggc29saWQ7IE1BUkdJTjogMjBweCAwcHg7IFBBRERJTkctUklHSFQ6IDEwcHg7IEJB

Q0tHUk9VTkQtQ09MT1I6IHJnYigyNTUsMjQ1LDIzMCkiPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4

Ij48U1RST05HPuOBlOazqOaEj++8mjwvU1RST05HPjwvUD4NCjxVTCBzdHlsZT0iTElTVC1TVFlM

RS1QT1NJVElPTjogaW5zaWRlIj4NCiAgPExJPuOBlOS4jeaYjuOBqueCueOBjOOBlOOBluOBhOOB

vuOBl+OBn+OCieOAgUFtYXpvbiDjga7lhazlvI/jgqvjgrnjgr/jg57jg7zjgrXjg7zjg5Pjgrnj

gb7jgafjgYrllY/jgYTlkIjjgo/jgZvjgY/jgaDjgZXjgYTjgII8L0xJPjwvVUw+PC9ESVY+DQo8

UCBzdHlsZT0iTUFSR0lOOiAwcHgiPuOBiuWuouanmOOBruOCouOCq+OCpuODs+ODiOOBruWuieWF

qOOCkuWuiOOCi+OBk+OBqOOBjOaIkeOAheOBruacgOWEquWFiOS6i+mgheOBp+OBmeOAguOBlOeQ

huino+OBqOOBlOWNlOWKm+OBq+aEn+isneeUs+OBl+S4iuOBkuOBvuOBmeOAgjwvUD4NCjxQIHN0

eWxlPSJNQVJHSU46IDBweCI+QW1hem9uIOOCq+OCueOCv+ODnuODvOOCteODvOODk+OCueODgeOD

vOODoDwvUD48L0RJVj4NCjxESVYgDQpzdHlsZT0iRk9OVC1TSVpFOiAxMnB4OyBNQVJHSU4tVE9Q

OiAyMHB4OyBDT0xPUjogcmdiKDEwMiwxMDIsMTAyKTsgVEVYVC1BTElHTjogY2VudGVyIj4NCkFt

YXpvbi5jby5qcA0KQW1hem9u44Ki44Kr44Km44Oz44OI44Gu5LiN5a+p44Gq5rS75YuV44Gr6Zai

44GZ44KL44K744Kt44Ol44Oq44OG44Kj6YCa55+lDQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgiPsKp

IDIwMjQgQW1hem9uLmNvbSwgSW5jLiDjgb7jgZ/jga/jgZ3jga7plqLpgKPkvJrnpL7jgIJBbGwg

cmlnaHRzIA0KcmVzZXJ2ZWQuPC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij5BbWF6b27jgIFB

bWF6b24uY28uanDjgIFBbWF6b24gUHJpbWXjgIFQcmltZSDjgYrjgojjgbMgQW1hem9uLmNvLmpw

IA0K44Gu44Ot44K044GvIEFtYXpvbi5jb20sIEluYy4g44G+44Gf44Gv44Gd44Gu6Zai6YCj5Lya

56S+44Gu5ZWG5qiZ44Gn44GZ44CCPC9QPjwvRElWPg0KPERJViANCnN0eWxlPSJGT05ULVNJWkU6

IDAuOGVtOyBDT0xPUjogcmdiKDEyNywxNDAsMTQxKTsgUEFERElORy1CT1RUT006IDIwcHg7IFRF

WFQtQUxJR046IGNlbnRlcjsgUEFERElORy1UT1A6IDIwcHg7IFBBRERJTkctTEVGVDogMjBweDsg

UEFERElORy1SSUdIVDogMjBweCI+DQo8UCANCnN0eWxlPSJNQVJHSU46IDBweCI+PEE+44Ot44Kw

44Kk44OzPC9BPjxTUEFOPiZuYnNwOzwvU1BBTj58PFNQQU4+Jm5ic3A7PC9TUEFOPjxBPuODoeOD

vOODq+OBrumFjeS/oeWBnOatouioreWumjwvQT48L1A+DQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgi

PsKpIDIwMjQgRnVvY3R0Z21rQm9JYkZ1b2N0dGdta0JvSWIuIEFsbCBSaWdodHMgDQpSZXNlcnZl

ZC48L1A+PC9ESVY+PC9ESVY+PC9ESVY+PEJSIA0Kc3R5bGU9IkZPTlQtU0laRTogMTNweDsgRk9O

VC1GQU1JTFk6IOW+rui9r+mbhem7kTsgV0hJVEUtU1BBQ0U6IG5vcm1hbDsgV09SRC1TUEFDSU5H

OiAwcHg7IFRFWFQtVFJBTlNGT1JNOiBub25lOyBGT05ULVdFSUdIVDogNDAwOyBDT0xPUjogcmdi

KDAsMCwwKTsgRk9OVC1TVFlMRTogbm9ybWFsOyBPUlBIQU5TOiAyOyBXSURPV1M6IDI7IExFVFRF

Ui1TUEFDSU5HOiBub3JtYWw7IEJBQ0tHUk9VTkQtQ09MT1I6IHJnYigyNTUsMjU1LDI1NSk7IFRF

WFQtSU5ERU5UOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNv

cmF0aW9uLXRoaWNrbmVzczogaW5pdGlhbDsgdGV4dC1kZWNvcmF0aW9uLXN0eWxlOiBpbml0aWFs

OyB0ZXh0LWRlY29yYXRpb24tY29sb3I6IGluaXRpYWw7IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6

IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbCI+PEJSIA0Kc3R5bGU9IkZPTlQtU0la

RTogMTNweDsgRk9OVC1GQU1JTFk6IOW+rui9r+mbhem7kTsgV0hJVEUtU1BBQ0U6IG5vcm1hbDsg

V09SRC1TUEFDSU5HOiAwcHg7IFRFWFQtVFJBTlNGT1JNOiBub25lOyBGT05ULVdFSUdIVDogNDAw

OyBDT0xPUjogcmdiKDAsMCwwKTsgRk9OVC1TVFlMRTogbm9ybWFsOyBPUlBIQU5TOiAyOyBXSURP

V1M6IDI7IExFVFRFUi1TUEFDSU5HOiBub3JtYWw7IEJBQ0tHUk9VTkQtQ09MT1I6IHJnYigyNTUs

MjU1LDI1NSk7IFRFWFQtSU5ERU5UOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw

eDsgdGV4dC1kZWNvcmF0aW9uLXRoaWNrbmVzczogaW5pdGlhbDsgdGV4dC1kZWNvcmF0aW9uLXN0

eWxlOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tY29sb3I6IGluaXRpYWw7IGZvbnQtdmFyaWFu

dC1saWdhdHVyZXM6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbCI+PEJSIA0Kc3R5

bGU9IkZPTlQtU0laRTogMTNweDsgRk9OVC1GQU1JTFk6IOW+rui9r+mbhem7kTsgV0hJVEUtU1BB

Q0U6IG5vcm1hbDsgV09SRC1TUEFDSU5HOiAwcHg7IFRFWFQtVFJBTlNGT1JNOiBub25lOyBGT05U

LVdFSUdIVDogNDAwOyBDT0xPUjogcmdiKDAsMCwwKTsgRk9OVC1TVFlMRTogbm9ybWFsOyBPUlBI

QU5TOiAyOyBXSURPV1M6IDI7IExFVFRFUi1TUEFDSU5HOiBub3JtYWw7IEJBQ0tHUk9VTkQtQ09M

T1I6IHJnYigyNTUsMjU1LDI1NSk7IFRFWFQtSU5ERU5UOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv

a2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uLXRoaWNrbmVzczogaW5pdGlhbDsgdGV4dC1k

ZWNvcmF0aW9uLXN0eWxlOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tY29sb3I6IGluaXRpYWw7

IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h

bCI+PEJSIA0Kc3R5bGU9IkZPTlQtU0laRTogMTNweDsgRk9OVC1GQU1JTFk6IOW+rui9r+mbhem7

kTsgV0hJVEUtU1BBQ0U6IG5vcm1hbDsgV09SRC1TUEFDSU5HOiAwcHg7IFRFWFQtVFJBTlNGT1JN

OiBub25lOyBGT05ULVdFSUdIVDogNDAwOyBDT0xPUjogcmdiKDAsMCwwKTsgRk9OVC1TVFlMRTog

bm9ybWFsOyBPUlBIQU5TOiAyOyBXSURPV1M6IDI7IExFVFRFUi1TUEFDSU5HOiBub3JtYWw7IEJB

Q0tHUk9VTkQtQ09MT1I6IHJnYigyNTUsMjU1LDI1NSk7IFRFWFQtSU5ERU5UOiAwcHg7IC13ZWJr

aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uLXRoaWNrbmVzczogaW5p

dGlhbDsgdGV4dC1kZWNvcmF0aW9uLXN0eWxlOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tY29s

b3I6IGluaXRpYWw7IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6IG5vcm1hbDsgZm9udC12YXJpYW50

LWNhcHM6IG5vcm1hbCI+PC9CT0RZPjwvSFRNTD4NCg==



--===============2099682028==--



Japanese Paypal phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 30 Oct 2024 17:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6IUl-00000000CeG-0qRT

for dave@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 17:52:59 -0600

Resent-From: The Doctor

Resent-Date: Wed, 30 Oct 2024 17:52:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [221.10.20.134] (port=57330 helo=costcojapan.jp)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Hmg-0000000014a-2oQt

for root@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 17:07:33 -0600

Message-ID: <20241031070723246366@costcojapan.jp>

From: "Paypay"

To:

Subject: =?utf-8?B?MTDmnIjpmZDlrprvvIHmnIDlpKcxMCwwMDDlhobnm7jlvZPjga5QYQ==?=

=?utf-8?B?eVBheeODneOCpOODs+ODiOOCkuOCsuODg+ODiOOBmeOCi+ODgeODo+ODs+OCue+8gQ==?=

Date: Thu, 31 Oct 2024 07:07:14 +0800

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0FD7_01D7280B.19A5E6B0"

X-mailer: Ixnostuwfv 4

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 今すぐ最大10,000円相当のPayPayポイントをゲット!

いつもPayPayをご利用いただき、ありがとうございます。

10月限定の特別キャンペーンで、最大10,000å [...]



Content analysis details: (13.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[221.10.20.134 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[221.10.20.134 listed in dnsbl.ahbl.org]

[221.10.20.134 listed in dnsbl.ahbl.org]

[221.10.20.134 listed in dnsbl.ahbl.org]

[221.10.20.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[221.10.20.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[221.10.20.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[221.10.20.134 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[221.10.20.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[221.10.20.134 listed in will-spam-for-food.eu.org]

[221.10.20.134 listed in will-spam-for-food.eu.org]

[221.10.20.134 listed in will-spam-for-food.eu.org]

[221.10.20.134 listed in will-spam-for-food.eu.org]

[221.10.20.134 listed in will-spam-for-food.eu.org]

[221.10.20.134 listed in will-spam-for-food.eu.org]

[221.10.20.134 listed in will-spam-for-food.eu.org]

[221.10.20.134 listed in will-spam-for-food.eu.org]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: mysticphotographystudios.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: a.share-dns.com/172.64.53.25]

[URI: b.share-dns.net/172.64.52.239]

[URI: mysticphotographystudios.com/166.88.141.34]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 MIXED_HREF_CASE Has href in mixed case

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?utf-8?B?MTDmnIjpmZDlrprvvIHmnIDlpKcxMCwwMDDlhobnm7jlvZPjga5QYQ==?=

=?utf-8?B?eVBheeODneOCpOODs+ODiOOCkuOCsuODg+ODiOOBmeOCi+ODgeODo+ODs+OCue+8gQ==?=



This is a multi-part message in MIME format.



------=_NextPart_000_0FD7_01D7280B.19A5E6B0

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: base64



5LuK44GZ44GQ5pyA5aSnMTAsMDAw5YaG55u45b2T44GuUGF5UGF544Od44Kk44Oz44OI44KS44Ky

44OD44OI77yBDQrjgYTjgaTjgoJQYXlQYXnjgpLjgZTliKnnlKjjgYTjgZ/jgaDjgY3jgIHjgYLj

gorjgYzjgajjgYbjgZTjgZbjgYTjgb7jgZnjgIINCjEw5pyI6ZmQ5a6a44Gu54m55Yil44Kt44Oj

44Oz44Oa44O844Oz44Gn44CB5pyA5aSnMTAsMDAw5YaG55u45b2T44GuUGF5UGF544Od44Kk44Oz

44OI44GM5b2T44Gf44KL44OB44Oj44Oz44K577yB5pel5bi444Gu44GK6LK344GE54mp44KE5pSv

5omV44GE44Gn57Ch5Y2Y44Gr5Y+C5Yqg44Gn44GN44G+44GZ44CCDQrjgq3jg6Pjg7Pjg5rjg7zj

g7PmpoLopoENCjIwMjTlubQxMOaciDHml6XvvIjngavvvInvvZ4xMOaciDMx5pel77yI5pyo77yJ

DQpQYXlQYXnjgpLkvb/jgYbjgaDjgZHjgafjgIHoh6rli5XnmoTjgavmir3pgbjjgavlj4LliqDj

gILmnIDlpKcxMCwwMDDlhobliIbjga7jg53jgqTjg7Pjg4jjgYzlvZPjgZ/jgovjg4Hjg6Pjg7Pj

grnvvIEgDQrkvr/liKnlupfjgoTjg6zjgrnjg4jjg6njg7PjgarjganjgIHml6XluLjnlJ/mtLvj

ga7jgYLjgonjgobjgovloLTpnaLjgadQYXlQYXnjgpLkvb/jgaPjgabjgIHnsKHljZjjgavlj4Ll

iqDjgafjgY3jgb7jgZnjgIIgDQrmr47ml6XjgYrosrfjgYTnianjgpLjgZnjgovjgZ/jgbPjgavj

gIHjg4Hjg6Pjg7PjgrnjgYzluoPjgYzjgorjgb7jgZnjgIIgDQrku4rjgZnjgZDoqbPntLDjgpLo

povjgosgDQrjg53jgqTjg7Pjg4jku5jkuI7mlrnms5UNCuOCreODo+ODs+ODmuODvOODs+e1guS6

huW+jOOAgeW9k+mBuOiAheOBq+OBr1BheVBheeOCouODl+ODquWGheOBp+mAmuefpeOBleOCjOOB

vuOBmeOAguODneOCpOODs+ODiOOBrzEx5pyI5Lit5pes44Gr5LuY5LiO44GV44KM44G+44GZ44CC

DQrms6jmhI/kuovpoIUNCuacrOOCreODo+ODs+ODmuODvOODs+OBr+S6iOWRiuOBquOBj+Wkieab

tOODu+e1guS6huOBmeOCi+WgtOWQiOOBjOOBlOOBluOBhOOBvuOBmeOAgg0K5LuY5LiO44GV44KM

44Gf44Od44Kk44Oz44OI44GvUGF5UGF55q6L6auY44Gr44OB44Oj44O844K444GV44KM44G+44GZ

44GM44CB5Ye66YeR44Gv44Gn44GN44G+44Gb44KT44CCIA0KUGF5UGF55qCq5byP5Lya56S+IHwg

44K144Od44O844OI44K744Oz44K/44O8IHwgc3VwcG9ydEBwYXlwYXkubmUuanANCuOBk+OBruOD

oeODvOODq+OBr+iHquWLlemAgeS/oeOBleOCjOOBpuOBhOOBvuOBmeOAgui/lOS/oeOBr+OBp+OB

jeOBvuOBm+OCk+OBruOBp+OBlOS6huaJv+OBj+OBoOOBleOBhOOAgg==



------=_NextPart_000_0FD7_01D7280B.19A5E6B0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv

L0VOIj4NCjxIVE1MIGxhbmc9amE+PEhFQUQ+PFRJVExFPlBheVBheSDjgq3jg6Pjg7Pjg5rjg7zj

g7M8L1RJVExFPg0KPE1FVEEgY2hhcnNldD1VVEYtOD4NCjxNRVRBIG5hbWU9dmlld3BvcnQgY29u

dGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxlPTEuMCI+DQo8U1RZTEU+DQog

ICAgICAgIGJvZHkgew0KICAgICAgICAgICAgZm9udC1mYW1pbHk6IEFyaWFsLCBzYW5zLXNlcmlm

Ow0KICAgICAgICAgICAgYmFja2dyb3VuZC1jb2xvcjogI2Y0ZjRmNDsNCiAgICAgICAgICAgIG1h

cmdpbjogMDsNCiAgICAgICAgICAgIHBhZGRpbmc6IDA7DQogICAgICAgIH0NCiAgICAgICAgLmNv

bnRhaW5lciB7DQogICAgICAgICAgICB3aWR0aDogMTAwJTsNCiAgICAgICAgICAgIG1heC13aWR0

aDogNjAwcHg7DQogICAgICAgICAgICBtYXJnaW46IDAgYXV0bzsNCiAgICAgICAgICAgIGJhY2tn

cm91bmQtY29sb3I6ICNmZmZmZmY7DQogICAgICAgICAgICBwYWRkaW5nOiAwOw0KICAgICAgICAg

ICAgYm9yZGVyLXJhZGl1czogOHB4Ow0KICAgICAgICAgICAgYm94LXNoYWRvdzogMCA0cHggOHB4

IHJnYmEoMCwgMCwgMCwgMC4xKTsNCiAgICAgICAgICAgIG92ZXJmbG93OiBoaWRkZW47DQogICAg

ICAgIH0NCiAgICAgICAgLmhlYWRlciB7DQogICAgICAgICAgICBiYWNrZ3JvdW5kLWNvbG9yOiAj

MDBhYWZmOw0KICAgICAgICAgICAgcGFkZGluZzogMjBweDsNCiAgICAgICAgICAgIHRleHQtYWxp

Z246IGNlbnRlcjsNCiAgICAgICAgfQ0KICAgICAgICAuaGVhZGVyIGgxIHsNCiAgICAgICAgICAg

IGNvbG9yOiB3aGl0ZTsNCiAgICAgICAgICAgIGZvbnQtc2l6ZTogMjRweDsNCiAgICAgICAgICAg

IG1hcmdpbjogMDsNCiAgICAgICAgfQ0KICAgICAgICAuY29udGVudCB7DQogICAgICAgICAgICBw

YWRkaW5nOiAyMHB4Ow0KICAgICAgICAgICAgY29sb3I6ICMzMzM7DQogICAgICAgIH0NCiAgICAg

ICAgLmNvbnRlbnQgaDIgew0KICAgICAgICAgICAgZm9udC1zaXplOiAyMnB4Ow0KICAgICAgICAg

ICAgbWFyZ2luLWJvdHRvbTogMTBweDsNCiAgICAgICAgfQ0KICAgICAgICAuY29udGVudCBwIHsN

CiAgICAgICAgICAgIGZvbnQtc2l6ZTogMTZweDsNCiAgICAgICAgICAgIGxpbmUtaGVpZ2h0OiAx

Ljg7DQogICAgICAgICAgICBtYXJnaW46IDEwcHggMDsNCiAgICAgICAgfQ0KICAgICAgICAuZGF0

ZSB7DQogICAgICAgICAgICBmb250LXdlaWdodDogYm9sZDsNCiAgICAgICAgICAgIGZvbnQtc2l6

ZTogMThweDsNCiAgICAgICAgICAgIG1hcmdpbi1ib3R0b206IDIwcHg7DQogICAgICAgIH0NCiAg

ICAgICAgLmJ1dHRvbi1jb250YWluZXIgew0KICAgICAgICAgICAgdGV4dC1hbGlnbjogY2VudGVy

Ow0KICAgICAgICAgICAgbWFyZ2luOiAzMHB4IDA7DQogICAgICAgIH0NCiAgICAgICAgLmJ1dHRv

biB7DQogICAgICAgICAgICBkaXNwbGF5OiBpbmxpbmUtYmxvY2s7DQogICAgICAgICAgICBwYWRk

aW5nOiAxNXB4IDQwcHg7DQogICAgICAgICAgICBiYWNrZ3JvdW5kLWNvbG9yOiAjZTYwMDAwOyAv

KiDmjInpkq7kuLpQYXlQYXnnuqLoibIgKi8NCiAgICAgICAgICAgIGNvbG9yOiB3aGl0ZTsNCiAg

ICAgICAgICAgIHRleHQtZGVjb3JhdGlvbjogbm9uZTsNCiAgICAgICAgICAgIGZvbnQtc2l6ZTog

MThweDsNCiAgICAgICAgICAgIGZvbnQtd2VpZ2h0OiBib2xkOw0KICAgICAgICAgICAgYm9yZGVy

LXJhZGl1czogNTBweDsNCiAgICAgICAgICAgIHRyYW5zaXRpb246IGJhY2tncm91bmQtY29sb3Ig

MC4zcyBlYXNlOw0KICAgICAgICB9DQogICAgICAgIC5idXR0b246aG92ZXIgew0KICAgICAgICAg

ICAgYmFja2dyb3VuZC1jb2xvcjogI2NjMDAwMDsNCiAgICAgICAgfQ0KICAgICAgICAuZm9vdGVy

IHsNCiAgICAgICAgICAgIHRleHQtYWxpZ246IGNlbnRlcjsNCiAgICAgICAgICAgIGZvbnQtc2l6

ZTogMTJweDsNCiAgICAgICAgICAgIGNvbG9yOiAjOTk5Ow0KICAgICAgICAgICAgcGFkZGluZzog

MjBweDsNCiAgICAgICAgICAgIGJhY2tncm91bmQtY29sb3I6ICNmMGYwZjA7DQogICAgICAgIH0N

CiAgICAgICAgLmZvb3RlciBhIHsNCiAgICAgICAgICAgIGNvbG9yOiAjMDBhYWZmOw0KICAgICAg

ICAgICAgdGV4dC1kZWNvcmF0aW9uOiBub25lOw0KICAgICAgICB9DQogICAgICAgIC5mb290ZXIg

YTpob3ZlciB7DQogICAgICAgICAgICB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsNCiAgICAg

ICAgfQ0KICAgIDwvU1RZTEU+DQoNCjxNRVRBIG5hbWU9R0VORVJBVE9SIGNvbnRlbnQ9Ik1TSFRN

TCAxMS4wMC45NjAwLjE4MzE1Ij48L0hFQUQ+DQo8Qk9EWT4NCjxESVYgY2xhc3M9Y29udGFpbmVy

Pg0KPERJViBjbGFzcz1oZWFkZXI+DQo8SDE+5LuK44GZ44GQ5pyA5aSnMTAsMDAw5YaG55u45b2T

44GuUGF5UGF544Od44Kk44Oz44OI44KS44Ky44OD44OI77yBPC9IMT48L0RJVj4NCjxESVYgY2xh

c3M9Y29udGVudD4NCjxQPuOBhOOBpOOCglBheVBheeOCkuOBlOWIqeeUqOOBhOOBn+OBoOOBjeOA

geOBguOCiuOBjOOBqOOBhuOBlOOBluOBhOOBvuOBmeOAgjwvUD4NCjxQPjEw5pyI6ZmQ5a6a44Gu

54m55Yil44Kt44Oj44Oz44Oa44O844Oz44Gn44CBPFNUUk9ORz7mnIDlpKcxMCwwMDDlhobnm7jl

vZPjga5QYXlQYXnjg53jgqTjg7Pjg4g8L1NUUk9ORz7jgYzlvZPjgZ/jgovjg4Hjg6Pjg7Pjgrnv

vIHml6XluLjjga7jgYrosrfjgYTnianjgoTmlK/miZXjgYTjgafnsKHljZjjgavlj4LliqDjgafj

gY3jgb7jgZnjgII8L1A+DQo8SDI+44Kt44Oj44Oz44Oa44O844Oz5qaC6KaBPC9IMj4NCjxQIGNs

YXNzPWRhdGU+MjAyNOW5tDEw5pyIMeaXpe+8iOeBq++8ie+9njEw5pyIMzHml6XvvIjmnKjvvIk8

L1A+DQo8VUw+DQogIDxMST48U1RST05HPlBheVBheeOCkuS9v+OBhuOBoOOBkTwvU1RST05HPuOB

p+OAgeiHquWLleeahOOBq+aKvemBuOOBq+WPguWKoOOAguacgOWkpzEwLDAwMOWGhuWIhuOBruOD

neOCpOODs+ODiOOBjOW9k+OBn+OCi+ODgeODo+ODs+OCue+8gSANCiAgPExJPuS+v+WIqeW6l+OC

hOODrOOCueODiOODqeODs+OBquOBqeOAgeaXpeW4uOeUn+a0u+OBruOBguOCieOChuOCi+WgtOmd

ouOBp1BheVBheeOCkuS9v+OBo+OBpuOAgeewoeWNmOOBq+WPguWKoOOBp+OBjeOBvuOBmeOAgiAN

CiAgPExJPuavjuaXpeOBiuiyt+OBhOeJqeOCkuOBmeOCi+OBn+OBs+OBq+OAgeODgeODo+ODs+OC

ueOBjOW6g+OBjOOCiuOBvuOBmeOAgiA8L0xJPjwvVUw+PC9ESVY+DQo8RElWIGNsYXNzPWJ1dHRv

bi1jb250YWluZXI+PEEgY2xhc3M9YnV0dG9uIGhyZWY9Imh0dHBzOi8vbXlzdGljcGhvdG9ncmFw

aHlzdHVkaW9zLmNvbSI+5LuK44GZ44GQ6Kmz57Sw44KS6KaL44KLPC9BPiANCjwvRElWPg0KPERJ

ViBjbGFzcz1jb250ZW50Pg0KPEgyPuODneOCpOODs+ODiOS7mOS4juaWueazlTwvSDI+DQo8UD7j

gq3jg6Pjg7Pjg5rjg7zjg7PntYLkuoblvozjgIHlvZPpgbjogIXjgavjga9QYXlQYXnjgqLjg5fj

g6rlhoXjgafpgJrnn6XjgZXjgozjgb7jgZnjgILjg53jgqTjg7Pjg4jjga8xMeaciOS4reaXrOOB

q+S7mOS4juOBleOCjOOBvuOBmeOAgjwvUD4NCjxIMj7ms6jmhI/kuovpoIU8L0gyPg0KPFA+5pys

44Kt44Oj44Oz44Oa44O844Oz44Gv5LqI5ZGK44Gq44GP5aSJ5pu044O757WC5LqG44GZ44KL5aC0

5ZCI44GM44GU44GW44GE44G+44GZ44CCPEJSPuS7mOS4juOBleOCjOOBn+ODneOCpOODs+ODiOOB

r1BheVBheeaui+mrmOOBq+ODgeODo+ODvOOCuOOBleOCjOOBvuOBmeOBjOOAgeWHuumHkeOBr+OB

p+OBjeOBvuOBm+OCk+OAgiANCjwvUD48L0RJVj4NCjxESVYgY2xhc3M9Zm9vdGVyPg0KPFA+UGF5

UGF55qCq5byP5Lya56S+IHwg44K144Od44O844OI44K744Oz44K/44O8IHwgPEEgaHJlZj0iaHR0

cHM6Ly9teXN0aWNwaG90b2dyYXBoeXN0dWRpb3MuY29tIj5zdXBwb3J0QHBheXBheS5uZS5qcDwv

QT48L1A+DQo8UD7jgZPjga7jg6Hjg7zjg6vjga/oh6rli5XpgIHkv6HjgZXjgozjgabjgYTjgb7j

gZnjgILov5Tkv6Hjga/jgafjgY3jgb7jgZvjgpPjga7jgafjgZTkuobmib/jgY/jgaDjgZXjgYTj

gII8L1A+PC9ESVY+PC9ESVY+PC9CT0RZPjwvSFRNTD4NCg==



------=_NextPart_000_0FD7_01D7280B.19A5E6B0--



Canada Revenue agency phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 30 Oct 2024 16:01:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6GjS-000000000ah-28pz

for dave@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 16:00:02 -0600

Resent-From: The Doctor

Resent-Date: Wed, 30 Oct 2024 16:00:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [192.177.111.99] (port=59839 helo=gki.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6GT3-00000000Kvy-01m8

for doctor@nl2k.ab.ca;

Wed, 30 Oct 2024 15:43:11 -0600

From: Canada Revenue Agency - Agence du revenu du Canada

To: doctor@nl2k.ab.ca

Subject: INTERAC e-Transfer: Your deposit has not yet been processed

Date: 30 Oct 2024 14:42:58 -0700

Message-ID: <20241030144258.B4E633751E736C82@gki.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Refund Notification: Transaction #8697BN87 Dear Recipient,





Content analysis details: (18.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[192.177.111.99 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: cdn.adscientificindex.com]

[URI: i0tc000.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: cdn.adscientificindex.com/172.67.212.184]

[URI: cdn.adscientificindex.com/104.21.16.131]

[URI: i0tc000.com/185.228.232.16]

[URI: dahlia.ns.cloudflare.com/172.64.32.89]

[URI: dahlia.ns.cloudflare.com/173.245.58.89]

[URI: dahlia.ns.cloudflare.com/108.162.192.89]

[URI: jack.ns.cloudflare.com/173.245.59.121]

[URI: jack.ns.cloudflare.com/108.162.193.121]

[URI: jack.ns.cloudflare.com/172.64.33.121]

[URI: c.dnspod.com/43.134.249.75]

[URI: c.dnspod.com/112.80.181.159]

[URI: c.dnspod.com/125.94.59.175]

[URI: a.dnspod.com/117.89.178.151]

[URI: a.dnspod.com/43.130.172.75]

[URI: a.dnspod.com/43.134.249.74]

[URI: a.dnspod.com/117.135.128.175]

[URI: b.dnspod.com/36.155.149.59]

[URI: b.dnspod.com/163.177.5.79]

[URI: b.dnspod.com/43.161.3.75]

0.3 OFFER_2 BODY: Offers you Something (2)

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.7 SARE_HTML_INV_TAG2 Message contains invalid HTML tag

1.0 SARE_HTML_INV_TAG3 Message contains invalid HTML tag

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.1 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} INTERAC e-Transfer: Your deposit has not yet been processed






=2Ew3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">






" />










padding: 0;

text-align: center;

background-color: #ededf1" class=3D"full-padding">


table-layout: fixed;

margin: 0 auto; min-width: 320px;

width: 100%;

background-color: #ededf1;

text-align: center" class=3D"wrapper" cellpadding=3D"0" cellspa=

cing=3D"0" role=3D"presentation">








margin: 20px 0" class=3D"header">




" alt=3D"CRA Logo" width=3D"165" style=3D"max-width:165px">


















font-family: Ubuntu, sans-serif">Refund Notification: Transacti=

on #8697BN87




font-family: 'PT Serif', Georgia, serif">Dear Recipient,




font-family: 'PT Serif', Georgia, serif">We are pleased to info=

rm you that a refund of $2,680.42 CAD has been successfull=

y processed.




font-family: 'PT Serif', Georgia, serif">To receive the refund,=

please select your bank and complete the deposit process. Note that this r=

efund offer is valid until November 1st, 2024.




color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" class=3D"btn">


color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" href=3D"https://i0tc00=

0.com" class=3D"btn">Deposit Your Refund





font-family: 'PT Serif', Georgia, serif">Best regards,
Jacin=

ta McIntyre
Canada Revenue Agency









3D"Signature"
60px" src=3D"https://cdn.adscientificindex.com/logos/26805.jpg">









































CRA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 30 Oct 2024 16:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Giw-00000000OUH-26Ym

for dave@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 15:59:30 -0600

Resent-From: The Doctor

Resent-Date: Wed, 30 Oct 2024 15:59:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [192.177.111.99] (port=60328 helo=gki.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6G4G-00000000IYs-2DWr

for www@nl2k.ab.ca;

Wed, 30 Oct 2024 15:17:34 -0600

From: Canada Revenue Agency - Agence du revenu du Canada

To: www@nl2k.ab.ca

Subject: INTERAC e-Transfer: Your deposit has not yet been processed

Date: 30 Oct 2024 14:17:22 -0700

Message-ID: <20241030141722.7D76CA5646FC9F58@gki.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Refund Notification: Transaction #8697BN87 Dear Recipient,





Content analysis details: (18.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[192.177.111.99 listed in sbl-xbl.spamhaus.org]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: cdn.adscientificindex.com]

[URI: i0tc000.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: cdn.adscientificindex.com/104.21.16.131]

[URI: cdn.adscientificindex.com/172.67.212.184]

[URI: dahlia.ns.cloudflare.com/108.162.192.89]

[URI: dahlia.ns.cloudflare.com/172.64.32.89]

[URI: dahlia.ns.cloudflare.com/173.245.58.89]

[URI: jack.ns.cloudflare.com/108.162.193.121]

[URI: jack.ns.cloudflare.com/172.64.33.121]

[URI: jack.ns.cloudflare.com/173.245.59.121]

[URI: c.dnspod.com/125.94.59.175]

[URI: c.dnspod.com/112.80.181.159]

[URI: c.dnspod.com/43.134.249.75]

[URI: a.dnspod.com/117.89.178.151]

[URI: a.dnspod.com/43.130.172.75]

[URI: a.dnspod.com/43.134.249.74]

[URI: a.dnspod.com/117.135.128.175]

[URI: b.dnspod.com/43.161.3.75]

[URI: b.dnspod.com/163.177.5.79]

[URI: b.dnspod.com/36.155.149.59]

[URI: i0tc000.com/185.228.232.16]

0.3 OFFER_2 BODY: Offers you Something (2)

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.7 SARE_HTML_INV_TAG2 Message contains invalid HTML tag

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 SARE_HTML_INV_TAG3 Message contains invalid HTML tag

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.1 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} INTERAC e-Transfer: Your deposit has not yet been processed






=2Ew3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">






" />










padding: 0;

text-align: center;

background-color: #ededf1" class=3D"full-padding">


table-layout: fixed;

margin: 0 auto; min-width: 320px;

width: 100%;

background-color: #ededf1;

text-align: center" class=3D"wrapper" cellpadding=3D"0" cellspa=

cing=3D"0" role=3D"presentation">








margin: 20px 0" class=3D"header">




" alt=3D"CRA Logo" width=3D"165" style=3D"max-width:165px">


















font-family: Ubuntu, sans-serif">Refund Notification: Transacti=

on #8697BN87




font-family: 'PT Serif', Georgia, serif">Dear Recipient,




font-family: 'PT Serif', Georgia, serif">We are pleased to info=

rm you that a refund of $2,680.42 CAD has been successfull=

y processed.




font-family: 'PT Serif', Georgia, serif">To receive the refund,=

please select your bank and complete the deposit process. Note that this r=

efund offer is valid until November 1st, 2024.




color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" class=3D"btn">


color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" href=3D"https://i0tc00=

0.com" class=3D"btn">Deposit Your Refund





font-family: 'PT Serif', Georgia, serif">Best regards,
Jacin=

ta McIntyre
Canada Revenue Agency









3D"Signature"
60px" src=3D"https://cdn.adscientificindex.com/logos/26805.jpg">









































CRA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 30 Oct 2024 16:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Gj4-00000000P0g-28Dh

for dave@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 15:59:38 -0600

Resent-From: The Doctor

Resent-Date: Wed, 30 Oct 2024 15:59:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [192.177.111.99] (port=55008 helo=gki.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6G5G-00000000Ieb-2Ihd

for support@nk.ca;

Wed, 30 Oct 2024 15:18:34 -0600

From: Canada Revenue Agency - Agence du revenu du Canada

To: support@nk.ca

Subject: INTERAC e-Transfer: Your deposit has not yet been processed

Date: 30 Oct 2024 14:18:24 -0700

Message-ID: <20241030141824.E2DBE13B967A9C5B@gki.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Refund Notification: Transaction #8697BN87 Dear Recipient,





Content analysis details: (18.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[192.177.111.99 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: i0tc000.com]

[URI: cdn.adscientificindex.com]

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.

See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URI: i0tc000.com]

[URI: adscientificindex.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: i0tc000.com/185.228.232.16]

[URI: cdn.adscientificindex.com/104.21.16.131]

[URI: cdn.adscientificindex.com/172.67.212.184]

[URI: c.dnspod.com/125.94.59.175]

[URI: c.dnspod.com/43.134.249.75]

[URI: c.dnspod.com/112.80.181.159]

[URI: a.dnspod.com/117.89.178.151]

[URI: a.dnspod.com/43.134.249.74]

[URI: a.dnspod.com/43.130.172.75]

[URI: a.dnspod.com/117.135.128.175]

[URI: b.dnspod.com/36.155.149.59]

[URI: b.dnspod.com/163.177.5.79]

[URI: b.dnspod.com/43.161.3.75]

[URI: dahlia.ns.cloudflare.com/173.245.58.89]

[URI: dahlia.ns.cloudflare.com/172.64.32.89]

[URI: dahlia.ns.cloudflare.com/108.162.192.89]

[URI: jack.ns.cloudflare.com/172.64.33.121]

[URI: jack.ns.cloudflare.com/173.245.59.121]

[URI: jack.ns.cloudflare.com/108.162.193.121]

0.3 OFFER_2 BODY: Offers you Something (2)

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.7 SARE_HTML_INV_TAG2 Message contains invalid HTML tag

1.0 SARE_HTML_INV_TAG3 Message contains invalid HTML tag

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.1 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} INTERAC e-Transfer: Your deposit has not yet been processed






=2Ew3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">






" />










padding: 0;

text-align: center;

background-color: #ededf1" class=3D"full-padding">


table-layout: fixed;

margin: 0 auto; min-width: 320px;

width: 100%;

background-color: #ededf1;

text-align: center" class=3D"wrapper" cellpadding=3D"0" cellspa=

cing=3D"0" role=3D"presentation">








margin: 20px 0" class=3D"header">




" alt=3D"CRA Logo" width=3D"165" style=3D"max-width:165px">


















font-family: Ubuntu, sans-serif">Refund Notification: Transacti=

on #8697BN87




font-family: 'PT Serif', Georgia, serif">Dear Recipient,




font-family: 'PT Serif', Georgia, serif">We are pleased to info=

rm you that a refund of $2,680.42 CAD has been successfull=

y processed.




font-family: 'PT Serif', Georgia, serif">To receive the refund,=

please select your bank and complete the deposit process. Note that this r=

efund offer is valid until November 1st, 2024.




color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" class=3D"btn">


color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" href=3D"https://i0tc00=

0.com" class=3D"btn">Deposit Your Refund





font-family: 'PT Serif', Georgia, serif">Best regards,
Jacin=

ta McIntyre
Canada Revenue Agency









3D"Signature"
60px" src=3D"https://cdn.adscientificindex.com/logos/26805.jpg">









































Canada Revenue agency phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 30 Oct 2024 15:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Gi4-00000000MSc-1aEC

for dave@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 15:58:36 -0600

Resent-From: The Doctor

Resent-Date: Wed, 30 Oct 2024 15:58:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [192.177.111.99] (port=52656 helo=gki.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Fh7-00000000G3N-0chW

for sales@nk.ca;

Wed, 30 Oct 2024 14:53:39 -0600

From: Canada Revenue Agency - Agence du revenu du Canada

To: sales@nk.ca

Subject: INTERAC e-Transfer: Your deposit has not yet been processed

Date: 30 Oct 2024 13:53:27 -0700

Message-ID: <20241030135327.D9CCD619C6C196DA@gki.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Refund Notification: Transaction #8697BN87 Dear Recipient,





Content analysis details: (18.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[192.177.111.99 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: i0tc000.com]

[URI: cdn.adscientificindex.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: cdn.adscientificindex.com/104.21.16.131]

[URI: cdn.adscientificindex.com/172.67.212.184]

[URI: dahlia.ns.cloudflare.com/108.162.192.89]

[URI: dahlia.ns.cloudflare.com/173.245.58.89]

[URI: dahlia.ns.cloudflare.com/172.64.32.89]

[URI: jack.ns.cloudflare.com/172.64.33.121]

[URI: jack.ns.cloudflare.com/108.162.193.121]

[URI: jack.ns.cloudflare.com/173.245.59.121]

[URI: c.dnspod.com/43.134.249.75]

[URI: c.dnspod.com/112.80.181.159]

[URI: c.dnspod.com/125.94.59.175]

[URI: a.dnspod.com/117.135.128.175]

[URI: a.dnspod.com/43.130.172.75]

[URI: a.dnspod.com/117.89.178.151]

[URI: a.dnspod.com/43.134.249.74]

[URI: b.dnspod.com/36.155.149.59]

[URI: b.dnspod.com/163.177.5.79]

[URI: b.dnspod.com/43.161.3.75]

[URI: i0tc000.com/185.228.232.16]

0.3 OFFER_2 BODY: Offers you Something (2)

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.0 SARE_HTML_INV_TAG3 Message contains invalid HTML tag

1.7 SARE_HTML_INV_TAG2 Message contains invalid HTML tag

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.1 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} INTERAC e-Transfer: Your deposit has not yet been processed






=2Ew3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">






" />










padding: 0;

text-align: center;

background-color: #ededf1" class=3D"full-padding">


table-layout: fixed;

margin: 0 auto; min-width: 320px;

width: 100%;

background-color: #ededf1;

text-align: center" class=3D"wrapper" cellpadding=3D"0" cellspa=

cing=3D"0" role=3D"presentation">








margin: 20px 0" class=3D"header">




" alt=3D"CRA Logo" width=3D"165" style=3D"max-width:165px">


















font-family: Ubuntu, sans-serif">Refund Notification: Transacti=

on #8697BN87




font-family: 'PT Serif', Georgia, serif">Dear Recipient,




font-family: 'PT Serif', Georgia, serif">We are pleased to info=

rm you that a refund of $2,680.42 CAD has been successfull=

y processed.




font-family: 'PT Serif', Georgia, serif">To receive the refund,=

please select your bank and complete the deposit process. Note that this r=

efund offer is valid until November 1st, 2024.




color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" class=3D"btn">


color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" href=3D"https://i0tc00=

0.com" class=3D"btn">Deposit Your Refund





font-family: 'PT Serif', Georgia, serif">Best regards,
Jacin=

ta McIntyre
Canada Revenue Agency









3D"Signature"
60px" src=3D"https://cdn.adscientificindex.com/logos/26805.jpg">









































Costco Phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 30 Oct 2024 15:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Ghz-00000000MRU-02WX

for dave@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 15:58:31 -0600

Resent-From: The Doctor

Resent-Date: Wed, 30 Oct 2024 15:58:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 28.6.155.104.bc.googleusercontent.com ([104.155.6.28]:46672 helo=cs-936194304409-default)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Fgq-00000000G1e-3zdA

for root@nl2k.ab.ca;

Wed, 30 Oct 2024 14:53:23 -0600

Date: Wed, 30 Oct 2024 20:53:10 +0000

To: root@nl2k.ab.ca

From: New offers

Subject: 500 Dollar to spend at Costco

Message-Id: <20241030205310.247602@cs-936194304409-default>

X-Mailer: promo

Reply-To: service@costco.ca

Content-Type: text/html; charset=UTF-8

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-RPCampaign: Grouponchannelcatchallcatchalllcggcrosssellfrimcatchalllocalgoodscrosssell20240729

Precedence: bulk

X-Priority: 3

X-Spam_score: 29.8

X-Spam_score_int: 298

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Unsubscribe here



Content analysis details: (29.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[104.155.6.28 listed in will-spam-for-food.eu.org]

[104.155.6.28 listed in will-spam-for-food.eu.org]

[104.155.6.28 listed in will-spam-for-food.eu.org]

[104.155.6.28 listed in will-spam-for-food.eu.org]

[104.155.6.28 listed in will-spam-for-food.eu.org]

[104.155.6.28 listed in will-spam-for-food.eu.org]

[104.155.6.28 listed in will-spam-for-food.eu.org]

[104.155.6.28 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[104.155.6.28 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[104.155.6.28 listed in dnsbl.ahbl.org]

[104.155.6.28 listed in dnsbl.ahbl.org]

[104.155.6.28 listed in dnsbl.ahbl.org]

[104.155.6.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[104.155.6.28 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[104.155.6.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[104.155.6.28 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[104.155.6.28 listed in dnsbl.ahbl.org]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: images.benchmarkemail.com]

[URI: sun9store.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: sun9store.com/157.7.107.53]

[URI: images.benchmarkemail.com/157.185.145.100]

[URI: images.benchmarkemail.com/157.185.169.206]

[URI: ns2.dnsmadeeasy.com/208.80.126.2]

[URI: ns4.dnsmadeeasy.com/208.80.127.2]

[URI: ns0.dnsmadeeasy.com/208.94.148.2]

[URI: ns1.dnsmadeeasy.com/208.80.124.2]

[URI: ns3.dnsmadeeasy.com/208.80.125.2]

[URI: uns01.lolipop.jp/202.239.23.47]

[URI: uns02.lolipop.jp/160.251.249.29]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 TVD_RCVD_IP Message was received from an IP address

0.0 FSL_HELO_NON_FQDN_1 No description available.

1.3 SARE_XMAIL_SUSP1 X-Mailer suggests spam (variant 1)

15 GR_DOMAIN_BENCHM3 URI: Body contains known spammer URI (benchm)

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 A_HREF_NOWHERE A link tag with empty href

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME

headers

0.0 HELO_NO_DOMAIN Relay reports its domain incorrectly

0.0 DYN_RDNS_SHORT_HELO_HTML Sent by dynamic rDNS, short HELO, and HTML

Subject: {SPAM?} 500 Dollar to spend at Costco























logo









































CRA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 30 Oct 2024 15:58:04 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6GhF-00000000MMw-32Ve

for dave@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 15:57:45 -0600

Resent-From: The Doctor

Resent-Date: Wed, 30 Oct 2024 15:57:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [192.177.111.99] (port=65319 helo=gki.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Eta-00000000BIF-3OFT

for doctor@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 14:02:29 -0600

From: Canada Revenue Agency - Agence du revenu du Canada

To: doctor@doctor.nl2k.ab.ca

Subject: INTERAC e-Transfer: Your deposit has not yet been processed

Date: 30 Oct 2024 13:02:16 -0700

Message-ID: <20241030130216.964FFFD946A56169@gki.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Refund Notification: Transaction #8697BN87 Dear Recipient,





Content analysis details: (18.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[192.177.111.99 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: i0tc000.com]

[URI: cdn.adscientificindex.com]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: i0tc000.com/34.88.44.156]

[URI: b.dnspod.com/43.161.3.75]

[URI: a.dnspod.com/43.130.172.75]

[URI: c.dnspod.com/125.94.59.175]

[URI: b.dnspod.com/36.155.149.59]

[URI: dahlia.ns.cloudflare.com/108.162.192.89]

[URI: dahlia.ns.cloudflare.com/172.64.32.89]

[URI: cdn.adscientificindex.com/172.67.212.184]

[URI: a.dnspod.com/117.135.128.175]

[URI: b.dnspod.com/163.177.5.79]

[URI: c.dnspod.com/112.80.181.159]

[URI: dahlia.ns.cloudflare.com/173.245.58.89]

[URI: c.dnspod.com/43.134.249.75]

[URI: jack.ns.cloudflare.com/108.162.193.121]

[URI: cdn.adscientificindex.com/104.21.16.131]

[URI: jack.ns.cloudflare.com/172.64.33.121]

[URI: a.dnspod.com/117.89.178.151]

[URI: a.dnspod.com/43.134.249.74]

[URI: jack.ns.cloudflare.com/173.245.59.121]

0.3 OFFER_2 BODY: Offers you Something (2)

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 SARE_HTML_INV_TAG3 Message contains invalid HTML tag

1.7 SARE_HTML_INV_TAG2 Message contains invalid HTML tag

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.1 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} INTERAC e-Transfer: Your deposit has not yet been processed






=2Ew3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">






" />










padding: 0;

text-align: center;

background-color: #ededf1" class=3D"full-padding">


table-layout: fixed;

margin: 0 auto; min-width: 320px;

width: 100%;

background-color: #ededf1;

text-align: center" class=3D"wrapper" cellpadding=3D"0" cellspa=

cing=3D"0" role=3D"presentation">








margin: 20px 0" class=3D"header">




" alt=3D"CRA Logo" width=3D"165" style=3D"max-width:165px">


















font-family: Ubuntu, sans-serif">Refund Notification: Transacti=

on #8697BN87




font-family: 'PT Serif', Georgia, serif">Dear Recipient,




font-family: 'PT Serif', Georgia, serif">We are pleased to info=

rm you that a refund of $2,680.42 CAD has been successfull=

y processed.




font-family: 'PT Serif', Georgia, serif">To receive the refund,=

please select your bank and complete the deposit process. Note that this r=

efund offer is valid until November 1st, 2024.




color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" class=3D"btn">


color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" href=3D"https://i0tc00=

0.com" class=3D"btn">Deposit Your Refund





font-family: 'PT Serif', Georgia, serif">Best regards,
Jacin=

ta McIntyre
Canada Revenue Agency









3D"Signature"
60px" src=3D"https://cdn.adscientificindex.com/logos/26805.jpg">









































CRA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 30 Oct 2024 15:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Gh3-00000000MLt-0lxn

for dave@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 15:57:33 -0600

Resent-From: The Doctor

Resent-Date: Wed, 30 Oct 2024 15:57:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [192.177.111.99] (port=64818 helo=gki.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Enf-00000000AYd-3uvP

for root@mail.nl2k.ab.ca;

Wed, 30 Oct 2024 13:56:22 -0600

From: Canada Revenue Agency - Agence du revenu du Canada

To: root@mail.nl2k.ab.ca

Subject: INTERAC e-Transfer: Your deposit has not yet been processed

Date: 30 Oct 2024 12:56:10 -0700

Message-ID: <20241030125610.1CA201EA6A22AA56@gki.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Refund Notification: Transaction #8697BN87 Dear Recipient,





Content analysis details: (18.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[192.177.111.99 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.

See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URI: adscientificindex.com]

[URI: i0tc000.com]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: cdn.adscientificindex.com]

[URI: i0tc000.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: cdn.adscientificindex.com/104.21.16.131]

[URI: cdn.adscientificindex.com/172.67.212.184]

[URI: dahlia.ns.cloudflare.com/172.64.32.89]

[URI: dahlia.ns.cloudflare.com/108.162.192.89]

[URI: dahlia.ns.cloudflare.com/173.245.58.89]

[URI: jack.ns.cloudflare.com/172.64.33.121]

[URI: jack.ns.cloudflare.com/173.245.59.121]

[URI: jack.ns.cloudflare.com/108.162.193.121]

[URI: i0tc000.com/34.88.44.156]

[URI: b.dnspod.com/163.177.5.79]

[URI: b.dnspod.com/43.161.3.75]

[URI: b.dnspod.com/36.155.149.59]

[URI: c.dnspod.com/125.94.59.175]

[URI: c.dnspod.com/43.134.249.75]

[URI: c.dnspod.com/112.80.181.159]

[URI: a.dnspod.com/117.89.178.151]

[URI: a.dnspod.com/43.134.249.74]

[URI: a.dnspod.com/117.135.128.175]

[URI: a.dnspod.com/43.130.172.75]

0.3 OFFER_2 BODY: Offers you Something (2)

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 LOTS_OF_MONEY Huge... sums of money

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.7 SARE_HTML_INV_TAG2 Message contains invalid HTML tag

1.0 SARE_HTML_INV_TAG3 Message contains invalid HTML tag

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.1 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} INTERAC e-Transfer: Your deposit has not yet been processed






=2Ew3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">






" />










padding: 0;

text-align: center;

background-color: #ededf1" class=3D"full-padding">


table-layout: fixed;

margin: 0 auto; min-width: 320px;

width: 100%;

background-color: #ededf1;

text-align: center" class=3D"wrapper" cellpadding=3D"0" cellspa=

cing=3D"0" role=3D"presentation">








margin: 20px 0" class=3D"header">




" alt=3D"CRA Logo" width=3D"165" style=3D"max-width:165px">


















font-family: Ubuntu, sans-serif">Refund Notification: Transacti=

on #8697BN87




font-family: 'PT Serif', Georgia, serif">Dear Recipient,




font-family: 'PT Serif', Georgia, serif">We are pleased to info=

rm you that a refund of $2,680.42 CAD has been successfull=

y processed.




font-family: 'PT Serif', Georgia, serif">To receive the refund,=

please select your bank and complete the deposit process. Note that this r=

efund offer is valid until November 1st, 2024.




color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" class=3D"btn">


color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" href=3D"https://i0tc00=

0.com" class=3D"btn">Deposit Your Refund





font-family: 'PT Serif', Georgia, serif">Best regards,
Jacin=

ta McIntyre
Canada Revenue Agency









3D"Signature"
60px" src=3D"https://cdn.adscientificindex.com/logos/26805.jpg">









































Promo Phishing

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 30 Oct 2024 15:58:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Ggq-00000000MKm-3Ufp

for dave@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 15:57:20 -0600

Resent-From: The Doctor

Resent-Date: Wed, 30 Oct 2024 15:57:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [141.227.134.90] (port=58599 helo=fletcher.house.gov)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Egj-000000009sZ-2M9j

for doctor@edmontonab.ca;

Wed, 30 Oct 2024 13:49:12 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=edmontonab.ca;

h=Date:From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding; i=doctor@edmontonab.ca;

bh=P8ChVQdVipgV7VeERShH8ZoHpRk=;

b=Ye9Vvv/pkgNxSMsO9Wd3KcCNfXGhqZDVapRMhNt/l+KbOAPmASr7JUpunI+KSptR1ouZfNEwsPWg

SplAF0mv0VsirTBQeZkFbP+xtghQ3wlb7olMwn/Rrb3fnr6l9SxHRxVGR1g7eew+6EV7zi+zs5pP

TivXvm9opQN2riIWbclYIBeLAaOjQY3pEvyBYFG6z9uOtWCn8pnu1tuBOBAFTaOmPWm2dLidZs4g

0v5iBrJzGXqrB9uxVEhq+NLKp1O98bKsDnPQvu/NtFhjYzPSvAZQjSJx6s7ThU/d5kC9UmgEttqQ

twLic6clclcIo3jgIB6Fb+4b9f4M+tYAc6ke9A==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=edmontonab.ca;

b=f2u+i1kbRnRHssgwt+BYBrm6xNwyQLzqjlH+A0fEuTpQ+AJlYkniSSJ0GigGMiSPNa3lOzHm/o7+

2u8b1ZtFLV7leGdYG0dqWViKozB0JFTZNwt26FMiSCohjNIFlnYP0q5gNy3v/uxaeqsD2HikrNXB

jlEeXIyAf6TGkabsGUrOPN9VnXz+jOY3Z7yI0U/qtyXF5jJJhQwILt3c5t6bvCcnfBBjj8pTkxk9

eh7OCFGqLGJjQoQsHf0laz0F4PzPJ9xJBOAh/ZqMABrSiK3N2dQDJsM1eltb9YQVVJYYiM3KPDyM

bnMfSrtM1iniFzsWBuSHVYeYdkCUnuisI4Hmgg==;

Date: Wed, 30 Oct 2024 19:49:00 +0000

From: doctor

To: doctor@edmontonab.ca

Subject: Just for you !!!!!!

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

Feedback-ID: ::1.us-east-1.FGOMu7cyRDQ+---6727----7025727---+DpDV8A4nRy0mhfXJECb4JrfNEF47z4w=:AmazonSES

X-Spam_score: 21.1

X-Spam_score_int: 211

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: doctor--Welcome_To_My_Email--doctor@edmontonab.ca - 4vhqrxozqyb12158ftmvx901cmbhlihrmgdwpa6728vhqrxozqyb7025727asgatfs4075mmwbdioqakxkw4

doctor@edmontonab.ca- ww-Welcome_To_My_Email-ww This Promo Just for you !!!!!!





Content analysis details: (21.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[141.227.134.90 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[141.227.134.90 listed in dnsbl.ahbl.org]

[141.227.134.90 listed in dnsbl.ahbl.org]

[141.227.134.90 listed in dnsbl.ahbl.org]

[141.227.134.90 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[141.227.134.90 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[141.227.134.90 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[141.227.134.90 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[141.227.134.90 listed in dnsbl.ahbl.org]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: fonts.googleapis.com]

[URI: pqpvlqpmn.opened4email.site]

[URI: edmontonab.ca]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[141.227.134.90 listed in will-spam-for-food.eu.org]

[141.227.134.90 listed in will-spam-for-food.eu.org]

[141.227.134.90 listed in will-spam-for-food.eu.org]

[141.227.134.90 listed in will-spam-for-food.eu.org]

[141.227.134.90 listed in will-spam-for-food.eu.org]

[141.227.134.90 listed in will-spam-for-food.eu.org]

[141.227.134.90 listed in will-spam-for-food.eu.org]

[141.227.134.90 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: fonts.googleapis.com/142.250.69.202]

[URI: edmontonab.ca/204.209.81.1]

[URI: ns4.google.com/216.239.38.10]

[URI: pqpvlqpmn.opened4email.site/15.204.57.221]

[URI: ns2.google.com/216.239.34.10]

[URI: ns3.google.com/216.239.36.10]

[URI: dns2.registrar-servers.com/156.154.133.200]

[URI: ns1.google.com/216.239.32.10]

[URI: dns1.registrar-servers.com/156.154.132.200]

[URI: gallifrey.edmontonab.ca/204.209.81.3]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 AC_BR_BONANZA RAW: Too many newlines in a row... spammy template

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

1.7 THIS_AD "This ad" and variants

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.2 HTML_TITLE_SUBJ_DIFF No description available.

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

0.0 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

Subject: {SPAM?} Just for you !!!!!!




w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">


ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">










"stylesheet" type=3D"text/css"/>

<br /><br /> doctor--Welcome_To_My_Email--doctor@edmontonab.ca<br /><br /> - 4vhqrxozqyb12158ftmvx901cmbhlihrmgdwpa6728vhqrxozqyb7025727=<br /><br /> asgatfs4075mmwbdioqakxkw4 doctor@edmontonab.ca-<br /><br /> ww-Welcome_To_My_Email-ww<br /><br />




0">


yle=3D"line-height: inherit;">


ht: inherit;">


ight: inherit;">


ttp://schema.org/EmailMessage" style=3D"font-family: 'Helvetica Neue',Helve=

tica,Arial,sans-serif; box-sizing: border-box; font-size: 14px; -webkit-fon=

t-smoothing: antialiased; -webkit-text-size-adjust: none; width: 100% !impo=

rtant; height: 100%; line-height: 1.6em; background-color: #fff; margin: 0;=

">


12158ftmvx901cmbhlihrmgdwpa6728vhqrxozqyb7025727asgatfs4075=

mmwbdioqakxkw4" style=3D"text-decoration: none;">


al,sans-serif; box-sizing: border-box; font-size: 14px; max-width: 650px; d=

isplay: block; margin: 0 auto; padding: 20px;">


42;font-family: 'Helvetica Neue',Helvetica,Arial,sans-serif; box-sizing: bo=

rder-box; font-size: 14px; margin: 0;" width=3D"100%">


sizing: border-box; font-size: 14px; margin: 0;text-align:center;">




ng: border-box; font-size: 14px; margin: 0;">








ial,sans-serif; box-sizing: border-box; font-size: 18px; vertical-align: to=

p; margin: 0; padding: 0 0 20px;" valign=3D"top">


serif;color:white;">

This Promo Just for you !!!!!!



ial,sans-serif; box-sizing: border-box; font-size: 14px; text-align:center;=

vertical-align: top; margin: 0; padding: 10px 0 10px;" valign=3D"top">
ass=3D"btn-primary" href=3D"http://141.227.134.90/4vhqrxozqyb=

12158ftmvx901cmbhlihrmgdwpa6728vhqrxozqyb7025727asgatfs4075mmwbdioqakxkw=

4" style=3D"font-family: 'Montserrat',Helvetica,Arial,sans-serif; b=

ox-sizing: border-box; font-size: 14px; color:#000; text-decoration: none; =

line-height: 2em; font-weight: bold; text-align:

center; cursor: pointer;

display: inline-block; border-radius: 5px; text-transform: capitalize; back=

ground-color: #FDFD04; margin: 0; border-color: #FDFD04; border-style: soli=

d; border-width: 10px 20px;">Click Her!



901cmbhlihrmgdwpa6728vhqrxozqyb7025727asgatfs4075mmwbdioqakxkw4" wid=

th=3D"0" height=3D"0">
































































text-align:center;margin-top:300px">If you no longer wish to receive these =

emails,
you can unsubscribe by clicking
12158ftmvx901cmbhlihrmgdwpa6728vhqrxozqyb7025727=

asgatfs4075mmwbdioqakxkw4" style=3D"color: blue;">here


pan>








You can unsubscribe at a=

ny time.
ftmvx901cmbhlihrmgdwpa6728vhqrxozqyb7025727asgatfs4075mmwbdioqakxkw4" st=

yle=3D"color: blue;">To leave










CRA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 30 Oct 2024 15:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Ggg-00000000MJx-3Yli

for dave@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 15:57:10 -0600

Resent-From: The Doctor

Resent-Date: Wed, 30 Oct 2024 15:57:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [192.177.111.99] (port=49702 helo=gki.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6Ecg-000000009UV-2zJM

for sales@netknow.ca;

Wed, 30 Oct 2024 13:45:01 -0600

From: Canada Revenue Agency - Agence du revenu du Canada

To: sales@netknow.ca

Subject: INTERAC e-Transfer: Your deposit has not yet been processed

Date: 30 Oct 2024 12:44:48 -0700

Message-ID: <20241030124448.88D79A222AD81D3C@gki.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Refund Notification: Transaction #8697BN87 Dear Recipient,





Content analysis details: (18.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[192.177.111.99 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: i0tc000.com]

[URI: cdn.adscientificindex.com]

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.

See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URI: i0tc000.com]

[URI: adscientificindex.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: cdn.adscientificindex.com/172.67.212.184]

[URI: cdn.adscientificindex.com/104.21.16.131]

[URI: b.dnspod.com/36.155.149.59]

[URI: b.dnspod.com/163.177.5.79]

[URI: b.dnspod.com/43.161.3.75]

[URI: c.dnspod.com/125.94.59.175]

[URI: c.dnspod.com/112.80.181.159]

[URI: c.dnspod.com/43.134.249.75]

[URI: a.dnspod.com/43.134.249.74]

[URI: a.dnspod.com/43.130.172.75]

[URI: a.dnspod.com/117.89.178.151]

[URI: a.dnspod.com/117.135.128.175]

[URI: dahlia.ns.cloudflare.com/108.162.192.89]

[URI: dahlia.ns.cloudflare.com/172.64.32.89]

[URI: dahlia.ns.cloudflare.com/173.245.58.89]

[URI: jack.ns.cloudflare.com/108.162.193.121]

[URI: jack.ns.cloudflare.com/172.64.33.121]

[URI: jack.ns.cloudflare.com/173.245.59.121]

[URI: i0tc000.com/34.88.44.156]

0.3 OFFER_2 BODY: Offers you Something (2)

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.0 SARE_HTML_INV_TAG3 Message contains invalid HTML tag

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.7 SARE_HTML_INV_TAG2 Message contains invalid HTML tag

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.1 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} INTERAC e-Transfer: Your deposit has not yet been processed






=2Ew3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">






" />










padding: 0;

text-align: center;

background-color: #ededf1" class=3D"full-padding">


table-layout: fixed;

margin: 0 auto; min-width: 320px;

width: 100%;

background-color: #ededf1;

text-align: center" class=3D"wrapper" cellpadding=3D"0" cellspa=

cing=3D"0" role=3D"presentation">








margin: 20px 0" class=3D"header">




" alt=3D"CRA Logo" width=3D"165" style=3D"max-width:165px">


















font-family: Ubuntu, sans-serif">Refund Notification: Transacti=

on #8697BN87




font-family: 'PT Serif', Georgia, serif">Dear Recipient,




font-family: 'PT Serif', Georgia, serif">We are pleased to info=

rm you that a refund of $2,680.42 CAD has been successfull=

y processed.




font-family: 'PT Serif', Georgia, serif">To receive the refund,=

please select your bank and complete the deposit process. Note that this r=

efund offer is valid until November 1st, 2024.




color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" class=3D"btn">


color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" href=3D"https://i0tc00=

0.com" class=3D"btn">Deposit Your Refund





font-family: 'PT Serif', Georgia, serif">Best regards,
Jacin=

ta McIntyre
Canada Revenue Agency









3D"Signature"
60px" src=3D"https://cdn.adscientificindex.com/logos/26805.jpg">









































Canada REvenue agency phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 30 Oct 2024 15:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6GgV-00000000MIH-3RUL

for dave@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 15:56:59 -0600

Resent-From: The Doctor

Resent-Date: Wed, 30 Oct 2024 15:56:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [192.177.111.99] (port=52661 helo=gki.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6EKU-000000007e7-1KVA

for root@nl2k.ab.ca;

Wed, 30 Oct 2024 13:26:13 -0600

From: Canada Revenue Agency - Agence du revenu du Canada

To: root@nl2k.ab.ca

Subject: INTERAC e-Transfer: Your deposit has not yet been processed

Date: 30 Oct 2024 12:26:00 -0700

Message-ID: <20241030122600.22F9474F3F4BDE61@gki.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Refund Notification: Transaction #8697BN87 Dear Recipient,





Content analysis details: (18.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

[192.177.111.99 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[192.177.111.99 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

[192.177.111.99 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.177.111.99 listed in dnsbl.ahbl.org]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: cdn.adscientificindex.com]

[URI: i0tc000.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: cdn.adscientificindex.com/104.21.16.131]

[URI: cdn.adscientificindex.com/172.67.212.184]

[URI: i0tc000.com/34.88.44.156]

[URI: dahlia.ns.cloudflare.com/173.245.58.89]

[URI: dahlia.ns.cloudflare.com/172.64.32.89]

[URI: dahlia.ns.cloudflare.com/108.162.192.89]

[URI: jack.ns.cloudflare.com/172.64.33.121]

[URI: jack.ns.cloudflare.com/173.245.59.121]

[URI: jack.ns.cloudflare.com/108.162.193.121]

[URI: b.dnspod.com/43.161.3.75]

[URI: b.dnspod.com/163.177.5.79]

[URI: b.dnspod.com/36.155.149.59]

[URI: c.dnspod.com/125.94.59.175]

[URI: c.dnspod.com/43.134.249.75]

[URI: c.dnspod.com/112.80.181.159]

[URI: a.dnspod.com/43.130.172.75]

[URI: a.dnspod.com/117.135.128.175]

[URI: a.dnspod.com/117.89.178.151]

[URI: a.dnspod.com/43.134.249.74]

0.3 OFFER_2 BODY: Offers you Something (2)

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.7 SARE_HTML_INV_TAG2 Message contains invalid HTML tag

1.0 SARE_HTML_INV_TAG3 Message contains invalid HTML tag

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.1 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} INTERAC e-Transfer: Your deposit has not yet been processed






=2Ew3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">






" />










padding: 0;

text-align: center;

background-color: #ededf1" class=3D"full-padding">


table-layout: fixed;

margin: 0 auto; min-width: 320px;

width: 100%;

background-color: #ededf1;

text-align: center" class=3D"wrapper" cellpadding=3D"0" cellspa=

cing=3D"0" role=3D"presentation">








margin: 20px 0" class=3D"header">




" alt=3D"CRA Logo" width=3D"165" style=3D"max-width:165px">


















font-family: Ubuntu, sans-serif">Refund Notification: Transacti=

on #8697BN87




font-family: 'PT Serif', Georgia, serif">Dear Recipient,




font-family: 'PT Serif', Georgia, serif">We are pleased to info=

rm you that a refund of $2,680.42 CAD has been successfull=

y processed.




font-family: 'PT Serif', Georgia, serif">To receive the refund,=

please select your bank and complete the deposit process. Note that this r=

efund offer is valid until November 1st, 2024.




color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" class=3D"btn">


color: #ffffff !important;

border-radius: 4px;

padding: 12px 24px;

text-decoration: none;

display: inline-block;

font-family: 'PT Serif', Georgia, serif" href=3D"https://i0tc00=

0.com" class=3D"btn">Deposit Your Refund





font-family: 'PT Serif', Georgia, serif">Best regards,
Jacin=

ta McIntyre
Canada Revenue Agency









3D"Signature"
60px" src=3D"https://cdn.adscientificindex.com/logos/26805.jpg">









































nk.ca credential phishing from google.com

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 30 Oct 2024 07:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t69Au-000000007Gn-0Xxn

for dave@doctor.nl2k.ab.ca;

Wed, 30 Oct 2024 07:55:52 -0600

Resent-From: The Doctor

Resent-Date: Wed, 30 Oct 2024 07:55:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 151.204.83.34.bc.googleusercontent.com ([34.83.204.151]:60852 helo=[10.88.0.7])

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1t63SY-000000009Lh-2PIl

for doctor@nl2k.ab.ca;

Wed, 30 Oct 2024 01:49:50 -0600

Content-Type: multipart/related; boundary="===============1537524454102955470=="

MIME-Version: 1.0

From: "Nl2k ."

To: doctor@nl2k.ab.ca

Subject: =?utf-8?q?doctor=40nl2k=2Eab=2Eca=3A_Password_Expiration_Notice?=

X-Priority: 2

X-Spam_score: 12.3

X-Spam_score_int: 123

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Message Center. Password expire doctor@nl2k.ab.ca



Content analysis details: (12.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.4 MISSING_DATE Missing Date: header

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.83.204.151 listed in will-spam-for-food.eu.org]

[34.83.204.151 listed in will-spam-for-food.eu.org]

[34.83.204.151 listed in will-spam-for-food.eu.org]

[34.83.204.151 listed in will-spam-for-food.eu.org]

[34.83.204.151 listed in will-spam-for-food.eu.org]

[34.83.204.151 listed in will-spam-for-food.eu.org]

[34.83.204.151 listed in will-spam-for-food.eu.org]

[34.83.204.151 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.83.204.151 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.83.204.151 listed in dnsbl.ahbl.org]

[34.83.204.151 listed in dnsbl.ahbl.org]

[34.83.204.151 listed in dnsbl.ahbl.org]

[34.83.204.151 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.83.204.151 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.83.204.151 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.83.204.151 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.83.204.151 listed in dnsbl.ahbl.org]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: obinnaoffordire.wixsite.com]

[URI: beri5271.emlnk.com]

0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to

zen.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[34.83.204.151 listed in zen.spamhaus.org]

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.

See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URI: emlnk.com]

[URI: wixsite.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: beri5271.emlnk.com/54.82.80.250]

[URI: beri5271.emlnk.com/54.235.205.181]

[URI: beri5271.emlnk.com/54.225.69.136]

[URI: beri5271.emlnk.com/34.237.253.202]

[URI: obinnaoffordire.wixsite.com/34.144.206.118]

[URI: dns1.p07.nsone.net/198.51.44.7]

[URI: dns2.p07.nsone.net/198.51.45.7]

[URI: dns3.p07.nsone.net/198.51.44.71]

[URI: dns4.p07.nsone.net/198.51.45.71]

[URI: ns-1160.awsdns-17.org/205.251.196.136]

[URI: ns-1642.awsdns-13.co.uk/205.251.198.106]

[URI: ns-174.awsdns-21.com/205.251.192.174]

[URI: ns-895.awsdns-47.net/205.251.195.127]

0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL

was blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[34.83.204.151 listed in list.dnswl.org]

0.0 TVD_RCVD_IP Message was received from an IP address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

0.1 TO_IN_SUBJ To address is in Subject

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?utf-8?q?doctor=40nl2k=2Eab=2Eca=3A_Password_Expiration_Notice?=



--===============1537524454102955470==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PGh0bWw+PGhlYWQ+CiAgICA8bWV0YSBuYW1lPSJHRU5FUkFUT1IiIGNvbnRlbnQ9Ik1TSFRNTCAx

MS4wMC4xMDU3MC4xMDAxIj4KICAgIDxtZXRhIGh0dHAtZXF1aXY9IlgtVUEtQ29tcGF0aWJsZSIg

Y29udGVudD0iSUU9ZWRnZSI+CiAgICA8L2hlYWQ+CiAgICA8Ym9keT4KICAgIDxkaXYgc3R5bGU9

ImJvcmRlci1jb2xvcjogcmdiKDIzOCwgMjM4LCAyMzgpOyB3aWR0aDogNjAwcHg7IGNvbG9yOiBy

Z2IoMzQsIDM0LCAzNCk7IHRleHQtdHJhbnNmb3JtOiBub25lOyB0ZXh0LWluZGVudDogMHB4OyBs

ZXR0ZXItc3BhY2luZzogbm9ybWFsOyBmb250LWZhbWlseTogQXJpYWwsIEhlbHZldGljYSwgc2Fu

cy1zZXJpZjsgZm9udC1zaXplOiBzbWFsbDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXdlaWdo

dDogNDAwOyB3b3JkLXNwYWNpbmc6IDBweDsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgYm94LXNpemlu

ZzogYm9yZGVyLWJveDsgb3JwaGFuczogMjsgd2lkb3dzOiAyOyBiYWNrZ3JvdW5kLWNvbG9yOiBy

Z2IoMjU1LCAyNTUsIDI1NSk7IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6IG5vcm1hbDsgZm9udC12

YXJpYW50LWNhcHM6IG5vcm1hbDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0

LWRlY29yYXRpb24tdGhpY2tuZXNzOiBpbml0aWFsOyAKICAgIHRleHQtZGVjb3JhdGlvbi1zdHls

ZTogaW5pdGlhbDsgdGV4dC1kZWNvcmF0aW9uLWNvbG9yOiBpbml0aWFsOyI+CiAgICA8ZGl2IHN0

eWxlPSJib3JkZXItY29sb3I6IHJnYigyMzgsIDIzOCwgMjM4KTsgcGFkZGluZzogNTBweCAzMHB4

IDMwcHg7IGJveC1zaXppbmc6IGJvcmRlci1ib3g7Ij4KICAgIDxkaXYgc3R5bGU9ImJvcmRlci1j

b2xvcjogcmdiKDIzOCwgMjM4LCAyMzgpOyBib3gtc2l6aW5nOiBib3JkZXItYm94OyI+CiAgICA8

dGFibGUgd2lkdGg9IjEwMCUiIHN0eWxlPSJib3JkZXItY29sb3I6IHJnYigyMzgsIDIzOCwgMjM4

KTsgYm9yZGVyLWNvbGxhcHNlOiBjb2xsYXBzZTsiPgogICAgPHRib2R5IHN0eWxlPSJib3JkZXIt

Y29sb3I6IHJnYigyMzgsIDIzOCwgMjM4KTsgYm94LXNpemluZzogYm9yZGVyLWJveDsiPgogICAg

PHRyIHN0eWxlPSJib3JkZXItY29sb3I6IHJnYigyMzgsIDIzOCwgMjM4KTsgYm94LXNpemluZzog

Ym9yZGVyLWJveDsiPgogICAgPHRkIHN0eWxlPSJib3JkZXItY29sb3I6IHJnYigyMzgsIDIzOCwg

MjM4KTsgbWFyZ2luOiAwcHg7IHRleHQtYWxpZ246IHJpZ2h0OyBmb250LXNpemU6IDIycHg7IGZv

bnQtd2VpZ2h0OiA2MDA7IGJveC1zaXppbmc6IGJvcmRlci1ib3g7Ij5NZXNzYWdlIENlbnRlci48

L3RkPjwvdHI+PC90Ym9keT48L3RhYmxlPjwvZGl2PgogICAgPGRpdiBzdHlsZT0iYm9yZGVyLWNv

bG9yOiByZ2IoMjM4LCAyMzgsIDIzOCk7IGJveC1zaXppbmc6IGJvcmRlci1ib3g7Ij4mbmJzcDs8

L2Rpdj4KICAgIDxkaXYgc3R5bGU9ImJhY2tncm91bmQ6IGJsYWNrOyBib3JkZXItY29sb3I6IHJn

YigyMzgsIDIzOCwgMjM4KTsgcGFkZGluZzogNXB4OyBjb2xvcjogd2hpdGU7IGJveC1zaXppbmc6

IGJvcmRlci1ib3g7Ij5QYXNzd29yZCBleHBpcmUgZG9jdG9yQG5sMmsuYWIuY2E8L2Rpdj4KICAg

IDxkaXYgc3R5bGU9ImJvcmRlci1jb2xvcjogcmdiKDIzOCwgMjM4LCAyMzgpOyBib3gtc2l6aW5n

OiBib3JkZXItYm94OyI+Jm5ic3A7PC9kaXY+CiAgICA8ZGl2IHN0eWxlPSJib3JkZXItY29sb3I6

IHJnYigyMzgsIDIzOCwgMjM4KTsgYm94LXNpemluZzogYm9yZGVyLWJveDsiPgogICAgPHRhYmxl

IHdpZHRoPSIxMDAlIiBzdHlsZT0iYm9yZGVyLWNvbG9yOiByZ2IoMjM4LCAyMzgsIDIzOCk7IGJv

cmRlci1jb2xsYXBzZTogY29sbGFwc2U7Ij4KICAgIDx0Ym9keSBzdHlsZT0iYm9yZGVyLWNvbG9y

OiByZ2IoMjM4LCAyMzgsIDIzOCk7IGJveC1zaXppbmc6IGJvcmRlci1ib3g7Ij4KICAgIDx0ciBz

dHlsZT0iYm9yZGVyLWNvbG9yOiByZ2IoMjM4LCAyMzgsIDIzOCk7IGJveC1zaXppbmc6IGJvcmRl

ci1ib3g7Ij4KICAgIDx0ZCBzdHlsZT0iYm9yZGVyLWNvbG9yOiByZ2IoMjM4LCAyMzgsIDIzOCk7

IG1hcmdpbjogMHB4OyBwYWRkaW5nOiA1cHg7IGJveC1zaXppbmc6IGJvcmRlci1ib3g7IiBjb2xz

cGFuPSIyIj5Zb3VyIFBhc3N3b3JkIGV4cGlyZXMgZG9jdG9yQG5sMmsuYWIuY2EuIFBsZWFzZSBm

b2xsb3cgdGhlIHBvcnRhbCBiZWxvdyB0byBjb250aW51ZSB3aXRoIHlvdXIgY3VycmVudCBwYXNz

d29yZC48L3RkPjwvdHI+CiAgICA8dHIgc3R5bGU9ImJvcmRlci1jb2xvcjogcmdiKDIzOCwgMjM4

LCAyMzgpOyBib3gtc2l6aW5nOiBib3JkZXItYm94OyI+CiAgICA8dGQgc3R5bGU9ImJvcmRlci1j

b2xvcjogcmdiKDIzOCwgMjM4LCAyMzgpOyBtYXJnaW46IDBweDsgcGFkZGluZzogNXB4OyBib3gt

c2l6aW5nOiBib3JkZXItYm94OyI+UmVjaXBpZW50OjwvdGQ+CiAgICA8dGQgc3R5bGU9ImJvcmRl

ci1jb2xvcjogcmdiKDIzOCwgMjM4LCAyMzgpOyBtYXJnaW46IDBweDsgcGFkZGluZzogNXB4OyB0

ZXh0LWFsaWduOiByaWdodDsgYm94LXNpemluZzogYm9yZGVyLWJveDsiPmRvY3RvckBubDJrLmFi

LmNhPC90ZD48L3RyPgogICAgPHRyIHN0eWxlPSJib3JkZXItY29sb3I6IHJnYigyMzgsIDIzOCwg

MjM4KTsgYm94LXNpemluZzogYm9yZGVyLWJveDsiPgogICAgPHRkIHN0eWxlPSJib3JkZXItY29s

b3I6IHJnYigyMzgsIDIzOCwgMjM4KTsgbWFyZ2luOiAwcHg7IHBhZGRpbmc6IDVweDsgYm94LXNp

emluZzogYm9yZGVyLWJveDsiPkRhdGU6PC90ZD4KICAgIDx0ZCBzdHlsZT0iYm9yZGVyLWNvbG9y

OiByZ2IoMjM4LCAyMzgsIDIzOCk7IG1hcmdpbjogMHB4OyBwYWRkaW5nOiA1cHg7IHRleHQtYWxp

Z246IHJpZ2h0OyBib3gtc2l6aW5nOiBib3JkZXItYm94OyI+MDc6NDk6MzUgQU08L3RkPjwvdHI+

CiAgICA8dHIgc3R5bGU9ImJvcmRlci1jb2xvcjogcmdiKDIzOCwgMjM4LCAyMzgpOyBib3gtc2l6

aW5nOiBib3JkZXItYm94OyI+CiAgICA8dGQgc3R5bGU9ImJvcmRlci1jb2xvcjogcmdiKDIzOCwg

MjM4LCAyMzgpOyBtYXJnaW46IDBweDsgcGFkZGluZzogNXB4OyBib3gtc2l6aW5nOiBib3JkZXIt

Ym94OyI+VGltZTo8L3RkPgogICAgPHRkIHN0eWxlPSJib3JkZXItY29sb3I6IHJnYigyMzgsIDIz

OCwgMjM4KTsgbWFyZ2luOiAwcHg7IHBhZGRpbmc6IDVweDsgdGV4dC1hbGlnbjogcmlnaHQ7IGJv

eC1zaXppbmc6IGJvcmRlci1ib3g7Ij4/PC90ZD48L3RyPjwvdGJvZHk+PC90YWJsZT48L2Rpdj4K

ICAgIDxkaXYgc3R5bGU9ImJvcmRlci1jb2xvcjogcmdiKDIzOCwgMjM4LCAyMzgpOyBib3gtc2l6

aW5nOiBib3JkZXItYm94OyI+Jm5ic3A7PC9kaXY+CiAgICA8ZGl2IHN0eWxlPSJib3JkZXItY29s

b3I6IHJnYigyMzgsIDIzOCwgMjM4KTsgYm94LXNpemluZzogYm9yZGVyLWJveDsiPgogICAgPHRh

YmxlIHdpZHRoPSIxMjAiIHN0eWxlPSJiYWNrZ3JvdW5kOiByZ2IoMCwgMTAzLCAxODQpOyBib3Jk

ZXItY29sb3I6IHJnYigyMzgsIDIzOCwgMjM4KTsgY29sb3I6IHdoaXRlOyBib3JkZXItY29sbGFw

c2U6IGNvbGxhcHNlOyI+CiAgICA8dGJvZHkgc3R5bGU9ImJvcmRlci1jb2xvcjogcmdiKDIzOCwg

MjM4LCAyMzgpOyBib3gtc2l6aW5nOiBib3JkZXItYm94OyI+CiAgICA8dHIgc3R5bGU9ImJvcmRl

ci1jb2xvcjogcmdiKDIzOCwgMjM4LCAyMzgpOyBib3gtc2l6aW5nOiBib3JkZXItYm94OyI+CiAg

ICA8dGQgc3R5bGU9ImJvcmRlci1jb2xvcjogcmdiKDIzOCwgMjM4LCAyMzgpOyBtYXJnaW46IDBw

eDsgYm94LXNpemluZzogYm9yZGVyLWJveDsiPgogICAgPGEgc3R5bGU9ImJvcmRlci1jb2xvcjog

cmdiKDIzOCwgMjM4LCAyMzgpOyBjb2xvcjogd2hpdGU7IGJveC1zaXppbmc6IGJvcmRlci1ib3g7

IGJhY2tncm91bmQtY29sb3I6IHRyYW5zcGFyZW50OyB0ZXh0LWRlY29yYXRpb24tbGluZTogbm9u

ZTsiIGhyZWY9Imh0dHBzOi8vb2Jpbm5hb2Zmb3JkaXJlLndpeHNpdGUuY29tL3NvLzYxUEJIUHZW

RS9jP3c9d3YyRENGNkk0b1V0QXdobzljMTdXeTB4OUF1TmJaalMwTGhTREI2YkthVS5leUoxSWpv

aWFIUjBjSE02THk5dFlXeHNaV0ZpYkdVdGNtVnRhVzVwYzJObGJuUXRZbTlpWTJGMExtZHNhWFJq

YUM1dFpTOGlMQ0p5SWpvaVpqUXlNR1E0TWpjdE1qZGtZUzAwTUdaakxXSXpaVEl0TXpoaE16SXhN

VFEwTVdKbUlpd2liU0k2SW0xaGFXd2lMQ0pqSWpvaU5HVXlaalV6TmpJdFlqYzFNaTAwT0dObExX

RTBNakF0WWpBd09XVTVaamxpTXpkakluMCM/ZW1haWw9Wkc5amRHOXlRRzVzTW1zdVlXSXVZMkU9

IiB0YXJnZXQ9Il9ibGFuayIgCiAgICByZWw9Im5vcmVmZXJyZXIiIGRhdGEtc2FmZXJlZGlyZWN0

dXJsPSJodHRwczovL3d3dy5nb29nbGUuY29tL3VybD9xPWh0dHBzOi8vYmVyaTUyNzEuZW1sbmsu

Y29tL2x0LnBocD94JTNEM1R4dG1yVUZVcVBVVDU1cUExY3dqUGFrX1pOLnl2a1dyLVppWDZMSVNw

ZWVGWmFoX3hBd1VlbXZQYVdaaU5BfmxmWXZiSFhIJTIzJTI1N0JlbWFpbCUyNTdEJmFtcDtzb3Vy

Y2U9Z21haWwmYW1wO3VzdD0xNzMwMzIwNTg3NjY0MDAwJmFtcDt1c2c9QU92VmF3MGF1enpHcTY3

MzNSUHg5Z1ZXMHNLZCI+Q29udGludWU8L2E+PC90ZD48L3RyPjwvdGJvZHk+PC90YWJsZT48L2Rp

dj48L2Rpdj48L2Rpdj4KICAgIDxkaXYgc3R5bGU9ImJvcmRlci1jb2xvcjogcmdiKDIzOCwgMjM4

LCAyMzgpOyBjb2xvcjogcmdiKDM0LCAzNCwgMzQpOyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgdGV4

dC1pbmRlbnQ6IDBweDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgZm9udC1mYW1pbHk6IEFyaWFs

LCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogc21hbGw7IGZvbnQtc3R5bGU6IG5v

cm1hbDsgZm9udC13ZWlnaHQ6IDQwMDsgd29yZC1zcGFjaW5nOiAwcHg7IHdoaXRlLXNwYWNlOiBu

b3JtYWw7IGJveC1zaXppbmc6IGJvcmRlci1ib3g7IG9ycGhhbnM6IDI7IHdpZG93czogMjsgYmFj

a2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyBmb250LXZhcmlhbnQtbGlnYXR1cmVz

OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IC13ZWJraXQtdGV4dC1zdHJva2Ut

d2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uLXRoaWNrbmVzczogaW5pdGlhbDsgCiAgICB0ZXh0

LWRlY29yYXRpb24tc3R5bGU6IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1jb2xvcjogaW5pdGlh

bDsiPiZuYnNwOzwvZGl2PgogICAgPHNwYW4gc3R5bGU9ImJvcmRlci1jb2xvcjogcmdiKDIzOCwg

MjM4LCAyMzgpOyBjb2xvcjogcmdiKDM0LCAzNCwgMzQpOyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg

dGV4dC1pbmRlbnQ6IDBweDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgZm9udC1mYW1pbHk6IEFy

aWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogc21hbGw7IGZvbnQtc3R5bGU6

IG5vcm1hbDsgZm9udC13ZWlnaHQ6IGJvbGRlcjsgd29yZC1zcGFjaW5nOiAwcHg7IHdoaXRlLXNw

YWNlOiBub3JtYWw7IGJveC1zaXppbmc6IGJvcmRlci1ib3g7IG9ycGhhbnM6IDI7IHdpZG93czog

MjsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyBmb250LXZhcmlhbnQtbGln

YXR1cmVzOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IC13ZWJraXQtdGV4dC1z

dHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uLXRoaWNrbmVzczogaW5pdGlhbDsgCiAg

ICB0ZXh0LWRlY29yYXRpb24tc3R5bGU6IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1jb2xvcjog

aW5pdGlhbDsiPk5vdGU6PC9zcGFuPgogICAgPHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoMzQsIDM0

LCAzNCk7IHRleHQtdHJhbnNmb3JtOiBub25lOyB0ZXh0LWluZGVudDogMHB4OyBsZXR0ZXItc3Bh

Y2luZzogbm9ybWFsOyBmb250LWZhbWlseTogQXJpYWwsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsg

Zm9udC1zaXplOiBzbWFsbDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXdlaWdodDogNDAwOyB3

b3JkLXNwYWNpbmc6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50

OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyBvcnBoYW5zOiAyOyB3aWRvd3M6IDI7IGJhY2tncm91bmQt

Y29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsgZm9udC12YXJpYW50LWxpZ2F0dXJlczogbm9ybWFs

OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw

cHg7IHRleHQtZGVjb3JhdGlvbi10aGlja25lc3M6IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1z

dHlsZTogCiAgICBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tY29sb3I6IGluaXRpYWw7Ij48c3Bh

bj4mbmJzcDs8L3NwYW4+Jm5ic3A7VGhlIGNvbnRlbnQgb2YgdGhpcyBlbWFpbCBpcyBjb25maWRl

bnRpYWwgYW5kIGludGVuZGVkIGZvciB0aGUgcmVjaXBpZW50IHNwZWNpZmllZCBpbiBtZXNzYWdl

IG9ubHkuIEl0IGlzIHN0cmljdGx5IGZvcmJpZGRlbiB0byBzaGFyZSBhbnkgcGFydCBvZiB0aGlz

IG1lc3NhZ2Ugd2l0aCBhbnkgdGhpcmQgcGFydHksIHdpdGhvdXQgYSB3cml0dGVuIGNvbnNlbnQg

b2YgdGhlIHNlbmRlci4gSWYgeW91IHJlY2VpdmVkIHRoaXMgbWVzc2FnZSBieSBtaXN0YWtlLCBw

bGVhc2UgcmVwbHkgdG8gdGhpcyBtZXNzYWdlIGFuZCBmb2xsb3cgd2l0aCBpdHMgZGVsZXRpb24s

IHNvIHRoYXQgd2UgY2FuIGVuc3VyZSBzdWNoIGEgbWlzdGFrZSBkb2VzIG5vdCBvY2N1ciBpbiB0

aGUgZnV0dXJlLjwvc3Bhbj48L2JvZHk+PC9odG1sPg==



--===============1537524454102955470==--