NDA phish from Google gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 25 Aug 2026 07:50:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))
(envelope-from)
id 1wyrWv-00000000FDU-2MXd
for dave@doctor.nl2k.ab.ca;
Tue, 25 Aug 2026 07:49:33 -0600
Resent-From: The Doctor
Resent-Date: Tue, 25 Aug 2026 07:49:33 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f230.google.com ([209.85.215.230]:45496)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100 (FreeBSD))
(envelope-from <3AUEyApnHm@visionsurveysqld.com.au>)
id 1wyrVk-00000000EpP-0xAy
for root@nk.ca;
Tue, 25 Aug 2026 07:48:29 -0600
Received: by mail-pg1-f230.google.com with SMTP id 41be03b00d2f7-cc1b838f9b6so77767a12.3
for; Tue, 25 Aug 2026 06:47:33 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1787665647; x=1788270447;
h=content-type:mime-version:content-language:accept-language
:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=WYu0DfxZZ8ydIS0KpMPiMODLRRYoAxZubAPXFk9FG5w=;
b=k9T8KRryHvKPtO57kCcACrJgIkNftwA9gAVs3/nj38CZ8RazG2Ed8KMcDD//sGAq3D
RDcyBWl/E46Ug/PJCly+q7Z0TdPZKW1+wO7BYwJZaTe68+cPl8AmWrNmPxja5plGxXTv
tJ/yp4TXjC1LMSR/v848MB7uxG4oovapzoVPbSAPuVicGJmXxCdFcSBEmkW1RhTfsZNA
GR2jmHUAhAuAE6x/gVD4o0ARDRfPd6PlPnf/8BG+OLScEVV4A8qg/8mOqcx/u8AAPlip
tgU2s5k9qHCBnSJAfHml5ruXwuXv9rxXwTA0c5N1sdN0Ps/7WycLes7l7zHQKi/pkub6
mUWw==
X-Gm-Message-State: AFuF++muq4Z9dwg/nKXSCt4hSLsAiXxBn8bt1vnhXpJJ1HEUQFRJ9Lb/
30urXPsoej9U3+eWJIC7yG6ZGCyaXKZ3//6SlJhX92psRDqZJI4wUSth1cnKRQohmrXK03TaVYE
RwdSIFejTMIGHllfr4YuCyqPUg3yVh9n27lozPNEq8KeFkTo=
X-Gm-Gg: AR+sD13RYfqdw2MiS3lXO+9ebBlKHcTqinXskJYMw+lKWPG9kRfQb+phQgCX9iujwHu
9XRC7Oa0lG6wqUuE6uku7parSUpnfQq+nv7v+Mids4V/fr7tnlFg4CmfE5eXSu8QZr3dpH+7NXK
YFY9l3Q7kYlu/XkuyD6l5UF6CS0+mbx19Pr7l4Urnb8shzTEBbBs2x4lWVBdVEKGjYuvKpfmSn2
KTWqI4YKhgmnWpONgKz63xSNLIzMk0qeij4Snax8MPEGBKPlyXwN3nyfCUY1VJw3R4Guc6W9Ps+
1OM7Gew+ttiSx5fORna8g9Dxu280w4lSPR/AqLCTQLXBMUIBlKxUYATDiEMDkiOqNi0+odMBOdr
lX45rxWfVImEWQpgtL+orshtfYhb3+NewB+mwEjzJFA==
X-Received: by 2002:a05:6a21:7482:b0:3c3:b57b:6291 with SMTP id adf61e73a8af0-3cd301b5175mr73552227637.18.1787665647266;
Tue, 25 Aug 2026 06:47:27 -0700 (PDT)
Received: from cs.yorku.ca (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])
by smtp-relay.gmail.com with ESMTPS id 41be03b00d2f7-cc199db38eesm1177634a12.1.2026.08.25.06.47.26
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 25 Aug 2026 06:47:27 -0700 (PDT)
X-Relaying-Domain: visionsurveysqld.com.au
From: root@nk.ca
To: root@nk.ca
Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026
Date: Tue, 25 Aug 2026 13:47:26 +0000
Message-ID: <2BE989CF30C071E94815BCA1349986E5@NAMPRD04.PROD.OUTLOOK.COM>
Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026
Thread-Index: cB7tpJN3kDXSH+mh7KufTEt/9HFCvg==
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-Exchange-Organization-AuthAs: Internal
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=5qfc87p6g6xf8g4p5zun64ub1ub0ui"
X-Spam_score: 7.9
X-Spam_score_int: 79
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: This is an HTML email. Please enable HTML to view its contents.
A file has been shared with you Hello Team, Nagindas Khandwala College has
shared a confidential document and requested your review.
Content analysis details: (7.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[34.74.183.98 listed in dnsbl.ahbl.org]
[34.74.183.98 listed in dnsbl.ahbl.org]
[34.74.183.98 listed in dnsbl.ahbl.org]
[34.74.183.98 listed in dnsbl.ahbl.org]
[209.85.215.230 listed in dnsbl.ahbl.org]
[209.85.215.230 listed in dnsbl.ahbl.org]
[209.85.215.230 listed in dnsbl.ahbl.org]
[209.85.215.230 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[34.74.183.98 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[34.74.183.98 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[34.74.183.98 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[34.74.183.98 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[34.74.183.98 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[34.74.183.98 listed in zen.spamhaus.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.215.230 listed in list.dnswl.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.215.230 listed in bl.score.senderscore.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Rejected by SPF record.]
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.215.230 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026
------=5qfc87p6g6xf8g4p5zun64ub1ub0ui
Content-Type: multipart/alternative;
boundary="----=eitmqmpltrrolajlvt22jvqouvv141"
------=eitmqmpltrrolajlvt22jvqouvv141
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
This is an HTML email. Please enable HTML to view its contents.
------=eitmqmpltrrolajlvt22jvqouvv141
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">
er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=
fff;border:1px solid #d1d1d1;border-radius:4px;">
olor:#242424;">
=20=20=20=20=20=20=20=20=20=20=20=20
" border=3D"0" width=3D"100%">
![](3D"cid:img_nn96yakh3q3zk36u"<br)
width=3D"32"
height=3D"32"
alt=3D"Nagindas Khandwala College"
title=3D"Nagindas Khandwala College"
usemap=3D"#workmap"
style=3D"display:block;border:0;outline:none;text-de=
coration:none;" />
argin-bottom:8px;">
A file has been shared with you
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 25 Aug 2026 07:50:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))
(envelope-from
id 1wyrWv-00000000FDU-2MXd
for dave@doctor.nl2k.ab.ca;
Tue, 25 Aug 2026 07:49:33 -0600
Resent-From: The Doctor
Resent-Date: Tue, 25 Aug 2026 07:49:33 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f230.google.com ([209.85.215.230]:45496)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100 (FreeBSD))
(envelope-from <3AUEyApnHm@visionsurveysqld.com.au>)
id 1wyrVk-00000000EpP-0xAy
for root@nk.ca;
Tue, 25 Aug 2026 07:48:29 -0600
Received: by mail-pg1-f230.google.com with SMTP id 41be03b00d2f7-cc1b838f9b6so77767a12.3
for
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1787665647; x=1788270447;
h=content-type:mime-version:content-language:accept-language
:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=WYu0DfxZZ8ydIS0KpMPiMODLRRYoAxZubAPXFk9FG5w=;
b=k9T8KRryHvKPtO57kCcACrJgIkNftwA9gAVs3/nj38CZ8RazG2Ed8KMcDD//sGAq3D
RDcyBWl/E46Ug/PJCly+q7Z0TdPZKW1+wO7BYwJZaTe68+cPl8AmWrNmPxja5plGxXTv
tJ/yp4TXjC1LMSR/v848MB7uxG4oovapzoVPbSAPuVicGJmXxCdFcSBEmkW1RhTfsZNA
GR2jmHUAhAuAE6x/gVD4o0ARDRfPd6PlPnf/8BG+OLScEVV4A8qg/8mOqcx/u8AAPlip
tgU2s5k9qHCBnSJAfHml5ruXwuXv9rxXwTA0c5N1sdN0Ps/7WycLes7l7zHQKi/pkub6
mUWw==
X-Gm-Message-State: AFuF++muq4Z9dwg/nKXSCt4hSLsAiXxBn8bt1vnhXpJJ1HEUQFRJ9Lb/
30urXPsoej9U3+eWJIC7yG6ZGCyaXKZ3//6SlJhX92psRDqZJI4wUSth1cnKRQohmrXK03TaVYE
RwdSIFejTMIGHllfr4YuCyqPUg3yVh9n27lozPNEq8KeFkTo=
X-Gm-Gg: AR+sD13RYfqdw2MiS3lXO+9ebBlKHcTqinXskJYMw+lKWPG9kRfQb+phQgCX9iujwHu
9XRC7Oa0lG6wqUuE6uku7parSUpnfQq+nv7v+Mids4V/fr7tnlFg4CmfE5eXSu8QZr3dpH+7NXK
YFY9l3Q7kYlu/XkuyD6l5UF6CS0+mbx19Pr7l4Urnb8shzTEBbBs2x4lWVBdVEKGjYuvKpfmSn2
KTWqI4YKhgmnWpONgKz63xSNLIzMk0qeij4Snax8MPEGBKPlyXwN3nyfCUY1VJw3R4Guc6W9Ps+
1OM7Gew+ttiSx5fORna8g9Dxu280w4lSPR/AqLCTQLXBMUIBlKxUYATDiEMDkiOqNi0+odMBOdr
lX45rxWfVImEWQpgtL+orshtfYhb3+NewB+mwEjzJFA==
X-Received: by 2002:a05:6a21:7482:b0:3c3:b57b:6291 with SMTP id adf61e73a8af0-3cd301b5175mr73552227637.18.1787665647266;
Tue, 25 Aug 2026 06:47:27 -0700 (PDT)
Received: from cs.yorku.ca (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])
by smtp-relay.gmail.com with ESMTPS id 41be03b00d2f7-cc199db38eesm1177634a12.1.2026.08.25.06.47.26
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 25 Aug 2026 06:47:27 -0700 (PDT)
X-Relaying-Domain: visionsurveysqld.com.au
From: root@nk.ca
To: root@nk.ca
Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026
Date: Tue, 25 Aug 2026 13:47:26 +0000
Message-ID: <2BE989CF30C071E94815BCA1349986E5@NAMPRD04.PROD.OUTLOOK.COM>
Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026
Thread-Index: cB7tpJN3kDXSH+mh7KufTEt/9HFCvg==
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-Exchange-Organization-AuthAs: Internal
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=5qfc87p6g6xf8g4p5zun64ub1ub0ui"
X-Spam_score: 7.9
X-Spam_score_int: 79
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: This is an HTML email. Please enable HTML to view its contents.
A file has been shared with you Hello Team, Nagindas Khandwala College has
shared a confidential document and requested your review.
Content analysis details: (7.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[34.74.183.98 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
[209.85.215.230 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[34.74.183.98 listed in dnsbl.ahbl.org]
[34.74.183.98 listed in dnsbl.ahbl.org]
[34.74.183.98 listed in dnsbl.ahbl.org]
[34.74.183.98 listed in dnsbl.ahbl.org]
[209.85.215.230 listed in dnsbl.ahbl.org]
[209.85.215.230 listed in dnsbl.ahbl.org]
[209.85.215.230 listed in dnsbl.ahbl.org]
[209.85.215.230 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[34.74.183.98 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[34.74.183.98 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[34.74.183.98 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[34.74.183.98 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[34.74.183.98 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[34.74.183.98 listed in zen.spamhaus.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.215.230 listed in list.dnswl.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.215.230 listed in bl.score.senderscore.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Rejected by SPF record.]
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.215.230 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026
------=5qfc87p6g6xf8g4p5zun64ub1ub0ui
Content-Type: multipart/alternative;
boundary="----=eitmqmpltrrolajlvt22jvqouvv141"
------=eitmqmpltrrolajlvt22jvqouvv141
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
This is an HTML email. Please enable HTML to view its contents.
------=eitmqmpltrrolajlvt22jvqouvv141
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">
er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=
fff;border:1px solid #d1d1d1;border-radius:4px;">
olor:#242424;">
=20=20=20=20=20=20=20=20=20=20=20=20
" border=3D"0" width=3D"100%">
width=3D"32"
height=3D"32"
alt=3D"Nagindas Khandwala College"
title=3D"Nagindas Khandwala College"
usemap=3D"#workmap"
style=3D"display:block;border:0;outline:none;text-de=
coration:none;" />
argin-bottom:8px;">
A file has been shared with you
gin-bottom:18px;">
Hello Team,
Nagindas Khandwala College has shared a confidential document=
and requested your review.
" border=3D"0"
style=3D"width:100%;border:1px solid #d1d1d1;border-radi=
us:4px;background:#ffffff;">
lign:middle;">
width=3D"30"
height=3D"30"
alt=3D"Nagindas Khandwala College File"
title=3D"Nagindas Khandwala College File"
usemap=3D"#workmap"
style=3D"display:block;border:0;outline:none;text-de=
coration:none;" />
le;">
:600;color:#242424;">
Nagindas Khandwala College NDA Agreement v3.docx
61;margin-top:2px;">
312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" alt=
=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" usemap=
=3D"#workmap" width=3D"15" />
gin-top:18px;">
This link will expire in 48 hours. If you have any questions,=
please contact the sender directly.
------=eitmqmpltrrolajlvt22jvqouvv141--
------=5qfc87p6g6xf8g4p5zun64ub1ub0ui
Content-Type: image/png
Content-Transfer-Encoding: base64
Content-ID:
Content-Disposition: inline
iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB
AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR
RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD
TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw
yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh
Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==
------=5qfc87p6g6xf8g4p5zun64ub1ub0ui
Content-Type: image/png
Content-Transfer-Encoding: base64
Content-ID:
Content-Disposition: inline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------=5qfc87p6g6xf8g4p5zun64ub1ub0ui
Content-Type: image/png
Content-Transfer-Encoding: base64
Content-ID:
Content-Disposition: inline
iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF
NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF
W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE
KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP
OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/
uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW
v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx
BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ
f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY
fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6
732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW
kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w
wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh
dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8
qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5
j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ
DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12
6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ
VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty
nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ
CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8
XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU
8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj
yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6
V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC
------=5qfc87p6g6xf8g4p5zun64ub1ub0ui--
![](3D"https://ci3.googleusercontent.com/meips/ADKq_=<br)
