X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 11:38:00 -0700

Received: from mail-pf1-f193.google.com ([209.85.210.193]:61733)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voQhJ-000000003yx-0uba

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 11:37:04 -0700

Received: by mail-pf1-f193.google.com with SMTP id d2e1a72fcca58-81f4f4d4822so1383327b3a.3

for ; Fri, 06 Feb 2026 10:36:06 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thedatabuild-com.20230601.gappssmtp.com; s=20230601; t=1770402960; x=1771007760; darn=doctor.nl2k.ab.ca;

h=disposition-notification-to:content-language:thread-index

:mime-version:message-id:date:subject:in-reply-to:references:to:from

:from:to:cc:subject:date:message-id:reply-to;

bh=aSMAXW2Ufzc6gwlvtc2t3Wn05Td//uH4WFzAT5bg7bE=;

b=LOmmHmLyMIejG+FmLw3/mEO6t7KaWeJTqYHFlh8mz9itspiDCQPMVMno5YOV3DLCT6

oNfTDteeqOulluF08cSq6pc/9YbIZQQ64DNIP9yu36hZdulK/NYKGrmolV9tViLcpINi

N9/nScIzEjanmGvyiCsLRaR+D2NKlgKtd3B2e+tPFUeN9oT/BuZkA9qyoYnO7Sfd27Om

F96f1fdybDiA0ubTa6k5zhIM/ZZBpss2ltpgy1OZvJI5Cyo7bVpb0iILyQHG6hLHGklA

TPYPPC8xs/Pomd7Z1JGMFPFuuFiiXJknN27M3ZL2oXn2yvDQp8nOtOnOm3VZtFX7pn0u

AEZw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770402960; x=1771007760;

h=disposition-notification-to:content-language:thread-index

:mime-version:message-id:date:subject:in-reply-to:references:to:from

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=aSMAXW2Ufzc6gwlvtc2t3Wn05Td//uH4WFzAT5bg7bE=;

b=DmcnIZ7xYOY7Bpp0oxF/syv3T4zjs+MIKB7OjE0ULtBH87nZXCs9tWLmj+VR8FapZ6

YcE2TPx+mh53hTD1pUIVoni8fou4Gg37xbubzPHTg2hSRggXFFllF8CJQB1TRS73NroY

S6SomSmh3DBxw43jIO8PW7M2YIvJlIdfqHm5RG7R3i6+X05l5i15iqNh758MukyNK/DL

iIfbjnc0Gml2spJtnM3eXXyLPpm1+1uCtKAaETaFY+zqNaK3wEuYO+w/zQoMa/CL+ZPL

iybbUf1+1kaHchufOeOcpcfWxK7tIHJFkTZSNWam8jSzg7a9PmZVffzE2Lnd7QPjk15c

gCsQ==

X-Gm-Message-State: AOJu0YyCUq4XTlvBCwvhjxhWT3JuYGCBGoCgG/QKreHIQadskh7AnfKi

lWu7FJmDDxiSQqh/Dmicz59EX1yHFZAMMcFd6IvthJSd+wtRd9MZRkDXQlDcqdpBbJCgZgiNYKj

FtQXeS1g=

X-Gm-Gg: AZuq6aIR8RxmWYbHGD8KmKAFFxisW4KC+ODdL5x48MePjlSPsWVx9vVwIF6Reoc74eR

69En+81RPxIsBLtiu2yF2I5MBbvBm8DuHLU3vOmo9nsu+m9vQS6Yy/JwVWp7F0iJAz5otGGmKUF

XZfMb1LJx/WYnaGnrWPHXkVPVLPR/vIA8ZRQR3PADvgl6m5qEuzY5ugcdSQ0E/az8vXpyNUep2n

rmd27i5VwnAx5BCbZ+1HPq3ecQou6B/qVEpPTOjyRti+z2P4t1yFooFxuXculyuZW3pIoFNJY3d

ENVmy8Y/MkbOkrvHUbWNFOAyIou/SGi8L5QXEMjJbQCJe1PcHsN1wmeqySItxhBB836YItorKtx

nDy1OPne/11Dhh4P1hkpgElraE2paXT32sH02Dv1qQ/Sg3irMwD8GQiO6BPWz0K9ZAr78ry0+YN

7RYZwpQ6NH/mDzVTCDvGnOhqVL9ciZrv5aEOk=

X-Received: by 2002:a05:6a00:2381:b0:7e8:43f5:bd39 with SMTP id d2e1a72fcca58-824416f2b42mr3396295b3a.37.1770402959711;

Fri, 06 Feb 2026 10:35:59 -0800 (PST)

Received: from DESKTOPDP4EVTG ([103.214.61.57])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-824418856d5sm2703765b3a.38.2026.02.06.10.35.58

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 06 Feb 2026 10:35:59 -0800 (PST)

From:

To:

References: <080601dc95eb$d8a7c8c0$89f75a40$@thedatabuild.com>

In-Reply-To: <080601dc95eb$d8a7c8c0$89f75a40$@thedatabuild.com>

Subject: RE: Shopify Users List

Date: Sat, 7 Feb 2026 00:05:20 +0530

Message-ID: <0aa801dc9797$6f9a6ec0$4ecf4c40$@thedatabuild.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0AA9_01DC97C5.8952AAC0"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: AQIZlVuqsVwHYhhgt+KfniuLSZ0rJbT8A0lw

Content-Language: en-us

Disposition-Notification-To:

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Just wanted to check if you have received my previous

email. Any update for me?



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[103.214.61.57 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

[209.85.210.193 listed in dnsbl.ahbl.org]

[209.85.210.193 listed in dnsbl.ahbl.org]

[209.85.210.193 listed in dnsbl.ahbl.org]

[103.214.61.57 listed in dnsbl.ahbl.org]

[103.214.61.57 listed in dnsbl.ahbl.org]

[103.214.61.57 listed in dnsbl.ahbl.org]

[103.214.61.57 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.193 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.193 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} RE: Shopify Users List



This is a multipart message in MIME format.



------=_NextPart_000_0AA9_01DC97C5.8952AAC0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







Just wanted to check if you have received my previous email.







Any update for me?







Awaiting your reply.







Regards,



Rose

Â

















This is an automated email, please do not reply.











Â





















--1c9e5bbbb9336e3669a57250f88edd9c8

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

intelcom-dragonfly@intelcom.ca |

Hello, ⚠️ We need you to confirm your delivery before it expires and returned to the sender !

Â

Â

Â

Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable. However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below: Confirm my delivery Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA). Have a great day!

Â

 This is an automated email, please do not reply. Â

--1c9e5bbbb9336e3669a57250f88edd9c8--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 12:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voRm1-00000000Fz3-415v

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 12:45:49 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 12:45:49 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [83.167.253.186] (port=59184 helo=givemeabreak.ca)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voQnm-000000004Vp-2ejz

for games@nl2k.ab.ca;

Fri, 06 Feb 2026 11:43:42 -0700

Received: by givemeabreak.ca (Postfix, from userid 33)

id 2C3D24247B; Fri, 6 Feb 2026 18:42:45 +0000 (UTC)

To: games@nl2k.ab.ca

Subject: We have not received payment for your customs duties! Your package will be returned to the sender.

Date: Fri, 6 Feb 2026 18:27:07 +0000

From: =?UTF-8?Q?Intelcom=C2=AE?=

Reply-To: noreply@wightman.com

Message-ID: <3413b5518fb7056ab443faca23279481@givemeabreak.ca>

List-Unsubscribe: mailto:bounce522-eXtBSWEj0otsQoy@givemeabreak.ca?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1c9e5bbbb9336e3669a57250f88edd9c8"

Content-Transfer-Encoding: 8bit

X-Spam_score: 16.0

X-Spam_score_int: 160

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: intelcom-dragonfly@intelcom.ca | Hello,



Content analysis details: (16.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

[83.167.253.186 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[83.167.253.186 listed in dnsbl.ahbl.org]

[83.167.253.186 listed in dnsbl.ahbl.org]

[83.167.253.186 listed in dnsbl.ahbl.org]

[83.167.253.186 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[83.167.253.186 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[83.167.253.186 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[83.167.253.186 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[83.167.253.186 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: ctmsapp.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: ctmsapp.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: ctmsapp.com]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: jii.li]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 HREF_EMPTY_NORDNS Empty href + no rDNS

0.0 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

Subject: {SPAM?} We have not received payment for your customs duties! Your package will be returned to the sender.



This is a multi-part message in MIME format.



--1c9e5bbbb9336e3669a57250f88edd9c8

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit













intelcom-dragonfly@intelcom.ca |











Hello,



⚠️ We need you to confirm your delivery before it expires and returned to the sender !



































Â















Â





Â















Please be advised that international mail entering Canada is subject to examination by the Canada Border Services Agency (CBSA). The CBSA determines whether goods are admissible into Canada and whether duties and taxes are applicable.



However, you have a package awaiting delivery due to non-payment of customs fees, taxes and brokerage to which it is subject in accordance with the terms and conditions of the Canada Border Services Agency in the amount of CA$ 2.29 payable via our secure form below:



Confirm my delivery



Intelcom - Dragonfly, as a delivery company, is responsible for collecting duties and taxes prior to delivering a mail item to the recipient, but the taxes and duties themselves are imposed by the Canada Border Services Agency (CBSA).



Have a great day!















Â

=20



=20



=20



=20

.cse-banner .encryption-icon {

/ We use the IE workaround instead. /

background-image: none !important;

}



.cse-banner .encryption-icon .ms-fallback {

display: block !important;

}



/ NB: Some MS clients ignore dark-scheme styling and apply their o=

wn, so there's nothing we can do to help there. /

@media (prefers-color-scheme: dark) {

.cse-banner:not([class^=3D"x_"]) .encryption-icon .ms-fallback {

display: none !important;

}



.cse-banner:not([class^=3D"x_"]) .encryption-icon .ms-fallback-da=

rk {

display: block !important;

}

}






/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Austin Nunnelly: Order VIHD31635 =E2=80=93 Update finalized"/>
an>
>
"/>
anization">
a itemprop=3D"eventId/googleCalendar" content=3D"ljAnZWXc17QnZLHzVMAOnaTsAs=

"/>
1px; height: 0; max-height: 0; width: 0; max-width: 0; opacity: 0; overflow=

: hidden;" itemprop=3D"name">Order VIHD31635 =E2=80=93 Update finalized
an>
0207T064914Z">
Z">
le=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"body-co=

ntainer">

=3D"height:16px;" aria-hidden=3D"true">   =3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class= =3D""> temtype=3D"http://schema.org/EmailMessage"> Orde= r VIHD31635 =E2=80=93 Update finalized = = =3D"border: solid 1px #dadce0; border-radius: 8px; direction: rtl; font-siz= e: 0; padding: 24px 32px; text-align: left; vertical-align: top;" class=3D"= main-container-inner"> style=3D"font-size: 13px; text-align: left; direction: ltr; display: inline= -block; vertical-align: top; width: 100%;overflow: hidden; word-wrap: break= -word;"> sentation" width=3D"100%" class=3D"main-column-table-ltr" style=3D"padding-= right: 32px; padding-left: 0;;table-layout: fixed;">= "main-column-td" style=3D"padding:0; vertical-align:top;"> 0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%"= style=3D"table-layout: fixed;"> text-align: left; word-break: break-word;;padding-bottom:2px;"> =3D"font-family: 'Google Sans', Roboto, sans-serif;font-weight: 400= ; font-size: 22px; line-height: 28px;color: #3c4043; text-decoration: none;= " class=3D"primary-text" role=3D"presentation">Orde= r VIHD31635 =E2=80=93 Update finalized =3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;pad= ding-bottom:24px;"> : normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-spac= ing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" r= ole=3D"presentation"> " datetime=3D"20260207T064914Z"> =3D"20260207T064914Z">Friday Feb 6, 2026 =E2=8B=85 10:4= 9pm (Pacific Time - Los Angeles) t-size: 0; padding: 0; text-align: left; word-break: break-word;;padding-bo= ttom:24px;"> l; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.= 2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"= presentation"> Windows MalwareSafe 1 865 209-0967<= /strong> Order Date: Saturday, 07 February 2026 Order number: 9681= -KEBZ-3975 Subscription is active and up to date = We thank you for choosing Windows MalwareSafe. Your membership has reach= ed its expiration today. Product Inventory View <= p>Selected Service: Premium Advantage Warranty: One Year Charged: $30= 5.44 This email is sent because you previously subscribed to our serv= ices. If you wish to cancel and obtain a full refund, contact >1 865 209-0967 immediately. Warm greetings, The Windows= MalwareSafe, LLC Manager: Kimberly May Copyright =C2=A92026 compa= ny. All rights reserved. tent=3D"Windows MalwareSafe1 865 209-0967Order Date: Saturday, 07 February= 2026Order number: 9681-KEBZ-3975Subscription is active and up to dateWe th= ank you for choosing Windows MalwareSafe. Your membership has reached its e= xpiration today.Product Inventory ViewSelected Service: Premium AdvantageWa= rranty: One YearCharged: $305.44This email is sent because you previously s= ubscribed to our services.If you wish to cancel and obtain a full refund, c= ontact 1 865 209-0967 immediately.Warm greetings,The Windows MalwareSafe, = LLCManager: Kimberly MayCopyright =C2=A92026 company. All rights reserved."= /> ft; word-break: break-word;;padding-bottom:24px;"> : Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14px;= line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: = none;" class=3D"primary-text" role=3D"presentation"> lpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"padding-bot= tom: 4px;"> r: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing: = antialiased;margin: 0; padding: 0;">Guests (Guest lis= t has been hidden at organizer's request)

--000000000000d6cf65064a2b683b--

--000000000000d6cf65064a2b683b

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



T3JkZXIgVklIRDMxNjM1IOKAkyBVcGRhdGUgZmluYWxpemVkDQoNCk9yZGVyIFZJSEQzMTYzNSDi

gJMgVXBkYXRlIGZpbmFsaXplZA0KRnJpZGF5IEZlYiA2LCAyMDI2IOKLhSAxMDo0OXBtDQpQYWNp

ZmljIFRpbWUgLSBMb3MgQW5nZWxlcw0KDQoNCg0KV2luZG93cyBNYWx3YXJlU2FmZTEgODY1ICAy

MDktMDk2N09yZGVyIERhdGU6IFNhdHVyZGF5LCAwNyBGZWJydWFyeSAgDQoyMDI2T3JkZXIgbnVt

YmVyOiA5NjgxLUtFQlotMzk3NVN1YnNjcmlwdGlvbiBpcyBhY3RpdmUgYW5kIHVwIHRvIGRhdGVX

ZSAgDQp0aGFuayB5b3UgZm9yIGNob29zaW5nIFdpbmRvd3MgTWFsd2FyZVNhZmUuIFlvdXIgbWVt

YmVyc2hpcCBoYXMgcmVhY2hlZCBpdHMgIA0KZXhwaXJhdGlvbiB0b2RheS5Qcm9kdWN0IEludmVu

dG9yeSBWaWV3U2VsZWN0ZWQgU2VydmljZTogUHJlbWl1bSAgDQpBZHZhbnRhZ2VXYXJyYW50eTog

T25lIFllYXJDaGFyZ2VkOiAkMzA1LjQ0VGhpcyBlbWFpbCBpcyBzZW50IGJlY2F1c2UgeW91ICAN

CnByZXZpb3VzbHkgc3Vic2NyaWJlZCB0byBvdXIgc2VydmljZXMuSWYgeW91IHdpc2ggdG8gY2Fu

Y2VsIGFuZCBvYnRhaW4gYSAgDQpmdWxsIHJlZnVuZCwgY29udGFjdCAxIDg2NSAgMjA5LTA5Njcg

aW1tZWRpYXRlbHkuV2FybSBncmVldGluZ3MsVGhlIFdpbmRvd3MgIA0KTWFsd2FyZVNhZmUsIExM

Q01hbmFnZXI6IEtpbWJlcmx5IE1heUNvcHlyaWdodCDCqTIwMjYgY29tcGFueS4gQWxsIHJpZ2h0

cyAgDQpyZXNlcnZlZC4NCg0KT3JnYW5pemVyDQpBdXN0aW4gTnVubmVsbHkNCmFudGhvbnlrbmln

aHRqaEBib21pc2Eub3JnDQoNCkd1ZXN0cw0KKEd1ZXN0IGxpc3QgaGFzIGJlZW4gaGlkZGVuIGF0

IG9yZ2FuaXplcidzIHJlcXVlc3QpDQoNCg==

--000000000000d6cf65064a2b683b

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 12:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voRlT-00000000FvC-1ps1

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 12:45:15 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 12:45:15 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f201.google.com ([209.85.167.201]:60526)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voPyC-000000000Kf-1f77

for doctor@nl2k.ab.ca;

Fri, 06 Feb 2026 10:50:25 -0700

Received: by mail-oi1-f201.google.com with SMTP id 5614622812f47-462a9191720so7818053b6e.0

for ; Fri, 06 Feb 2026 09:49:29 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1770400163; x=1771004963; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=cmMhlAzaT65WmdF00kLBZcerfGW5RawaFkzqmubSoXw=;

b=mqi11sMLg+vxxZaQiWN8xdDlCaEIFjowtKvKH/md/xHJcV4D5GElqtQHF/Ei0MpqCR

fUWLTz60TQdVC/AGD2eum4D/R8lKDDoFDaydC0kRZJJeADoEG3Nuh+6ujWmJuMbhTTPq

c1qv3cJgRr1e3NLbJ5X+h+QUUC8TenVYeV9mCYKeINk1TlnNTy+e3BzqSCObn/kOzX7l

OjmyDCKZDKHuSEbKEjkBdPNVIRYKWiZ15oL9PM3S9Cv21cO9xugPJa3vJYI8KcMRNiZw

ecJynpEj+ce1it4fV/zW1IUTQaggZnYj2ecqlM5r17xy6TD20yvFHkUDVuq+PFZ4baVm

id6Q==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=bomisa-org.20230601.gappssmtp.com; s=20230601; t=1770400163; x=1771004963; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=cmMhlAzaT65WmdF00kLBZcerfGW5RawaFkzqmubSoXw=;

b=0bN+3htbXXJydF8/qwRYoW5MAv2Si8UYGHn83wBpRx3YnTQFxTpBMz0j7ZihleuMVu

ghMuqFAu91Uf1cIm9XeVNCVAMGhjPFdlb+G/1qZ4wp0i3qnI0zLdCc/aV7pBoS0GMThF

tKBGvXh9Dh0ZdmVfsejjDnZQ1hEZWgiWEVEmjExSd2AmdPcbXaiQpu30g3S/EIFHjqsq

+rXYf/p6uLIRye6Jm0Q1qlyNbiKphgWLtb6Kj6ZgxjQCbXQtmSd150I91uSuMnyd6P57

bISGpxe5suEhpE/wdDYR3SwHsgXm1bcPUWFX+nMvRUDEVoJijLavFmQJUCZDNEz4ZmN8

vn7Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770400163; x=1771004963;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=cmMhlAzaT65WmdF00kLBZcerfGW5RawaFkzqmubSoXw=;

b=bOsROHMSMmaUEnb+pszW9wDvXDrL+NbBlVvRz0+stq2PY80a+hq9W4WXhQgM39vOSc

uLN08GxmCBR0TG7NSHcfQEAw91d7F/MEajKhPJbG10w6vTBqPmQtPKWcBT/pkuBTfOEH

PjjvVprujqZHCsSkxGA1cKesw0zbBmX5xDblNYRmX0vBiSGaf1+LF2a7excAWKiNkUhb

gTgTqM0crmJiTjRgGgz5N4Ur1BDFVxDPowXXAwHv/jECiHAvBdE4uYc7qCCS3exrnIEk

1s0cv4pDcVhaShoXnv7sDJAnXb/+vm6ZaxeH6V0hX3f5ajiOVPmjQHlgMiFrTuntjIBb

3T0g==

X-Forwarded-Encrypted: i=1; AJvYcCXi0LQR7w53nK23TKNJcETP6luotyOm+5MxhEUULpBVcPZxW2mxMFHCJo8i6sqQQjYsXvuyHbU=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YxFDvAALVMBHPFmA7YUw3znJKY5AC8fYcFxtefK125MLzFFIZ3y

93SVkaFOYtVlqYt0OKdBeUkTFjzNLXPWa5lYM49wag/9DzLcN6pPkOvmr0YBKA8KmxMqGOtJXDs

ehDIxd2GsRT8hr4WR2sCC6hk7S4OHtmT/oOVwdfb7kY2DDw==

MIME-Version: 1.0

X-Received: by 2002:a4a:ec42:0:b0:659:9a49:9043 with SMTP id

006d021491bc7-66d099c5b61mt1999009eaf.14.1770400163091; Fri, 06 Feb 2026

09:49:23 -0800 (PST)

Reply-To: Austin Nunnelly

Sender: Google Calendar

Message-ID:

Date: Fri, 06 Feb 2026 17:49:23 +0000

Subject: Order VIHD31635 - Update finalized

From: Austin Nunnelly

Content-Type: multipart/alternative; boundary="000000000000d6cf65064a2b683b"

X-Spam_score: 13.0

X-Spam_score_int: 130

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Order VIHD31635 – Update finalized Order VIHD31635 – Update

finalized Friday Feb 6, 2026 â‹… 10:49pm Pacific Time - Los Angeles Windows

MalwareSafe1 865 209-0967Order Date: Saturday, 07 February 2026Order number:

9681-KEBZ-3975Subscription is active and up to dateWe thank you for choosing

Windows MalwareSafe. Your membership h [...]



Content analysis details: (13.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.201 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

[209.85.167.201 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

[209.85.167.201 listed in dnsbl.ahbl.org]

[209.85.167.201 listed in dnsbl.ahbl.org]

[209.85.167.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.201 listed in dnsbl.ahbl.org]

1.2 MISSING_HEADERS Missing To: header

0.6 J_CHICKENPOX_93 BODY: 9alpha-pock-3alpha

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.167.201 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.167.201 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.201 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.167.201 listed in bl.score.senderscore.com]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[209.85.167.201 listed in psbl.surriel.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.201 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Order VIHD31635 - Update finalized

--_000_KL1PR0401MB45627CD0D48F7B4E31A8127DA666AKL1PR0401MB4562_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">







































--_000_KL1PR0401MB45627CD0D48F7B4E31A8127DA666AKL1PR0401MB4562_--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Fri, 06 Feb 2026 10:11:53 -0700

Received: from mail-japaneastazolkn19012056.outbound.protection.outlook.com ([52.103.43.56]:5562 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voPMr-00000000FAO-1vu8

for dave@nk.ca;

Fri, 06 Feb 2026 10:11:52 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=pS2Q99krkuId6YvcFvHuVNUBkoz3esyD3N2n8TqrJgfccPlTUsJmwJ5elNUyh6GQC5EXTqEl86dEF29nidBVQVnlq+R7Rbwe+uZjtRTtXcXTQVbfkIbgithYqBAABUCF8GWvfmNTDxRPxHE9bztMCv1+odjwxyaaPBt+jU/UVaCAKZX8M6WqQyHoThRABCs9vPCLoBRbgjD1LR6SvXwbBgsVfQDdhzC5St7g2CN3dkg7ylkssGZhwMt8e+qXRCJgfmxEAXB8YVZYMfI+VFXCyQ9DhSmABySQBS8oiHae1PGjH1eG9gtH9cCbw9wlNo98PBtmfDN1s5DSrTvJoaP8Wg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=wiourjKM/4C3o5cGbR8AJgMpY2d1gI0BgPVvu6fFyZ0=;

b=e0/gFtQcrRiwf1jbf+GBTC9rfjxSjbkasUsdbuu9hmh7fvuAvQCZ0FwJ3l6v4CNOOuUAfx384rKtOIXQ3ugTj7Xq1sIyhEUUUMVZaCjrQOoN6hqfW1CV4qha2cNldJ3nL7g3pdnwjefeandoKfCE+3wb4mR4J2E3xYKbsOM8J+A8PIgZ2VUFcN4qyF2YZclZlGXG4EdtCapdZGkAn0YbYDukQjBJAuWaNhf1tgLe+kNsnIbsaqSOD3cz9A1vRfSjMfeVIIe9BnFdzglYiiVqMmxeFcF9eBrSyGxgzUmVJD/5RS/byplMUDUQVwXnriLjYQ1sA3OFRddy5jL+a19nWg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=wiourjKM/4C3o5cGbR8AJgMpY2d1gI0BgPVvu6fFyZ0=;

b=ExKqy+X5KgH9kLdSA1QT+gkk/200Okk8BhSk7vLjRhxH9Xth8tUZnSX6pN0fmYd5UfyAr4eq7SLcV79MFb+KLa0PgiGizztrOllaQujefE3OYU32jIdW1QIRznVf+/ZKkD3rPmKhZIY0pXYzLsYwWHXk5Wj8p0caGP3oMmdFkOZ1kTe1qmCXzedQqrstyMmJNN99Z1DQ1uO07oEKVhIH63qpXuOr8nAovzl6ISkMmhibp2Ne9ka0a9rnT9ni4KgGipZodAPwSqxen1NaSlAS00g1d0uK/1/D2xm3d4OEj8ptRpOL5E4EP4+NA7LBRgG71tpDgC5TPhcekU/5OKih9w==

Received: from KL1PR0401MB4562.apcprd04.prod.outlook.com

(2603:1096:820:5b::12) by TYZPR04MB7579.apcprd04.prod.outlook.com

(2603:1096:405:3c::13) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9587.14; Fri, 6 Feb

2026 17:10:12 +0000

Received: from KL1PR0401MB4562.apcprd04.prod.outlook.com

([fe80::e931:588c:1bd3:fda9]) by KL1PR0401MB4562.apcprd04.prod.outlook.com

([fe80::e931:588c:1bd3:fda9%6]) with mapi id 15.20.9587.013; Fri, 6 Feb 2026

17:10:11 +0000

From: Mary Smith

To: Mary Smith

Subject: Re: Google's first page?

Thread-Topic: Google's first page?

Thread-Index: AQHcl4tQJGAHgRDyiUS6+rOZ8KxhjQ==

Date: Fri, 6 Feb 2026 17:10:10 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KL1PR0401MB4562:EE_|TYZPR04MB7579:EE_

x-ms-office365-filtering-correlation-id: de5520b2-4065-4aa9-9b39-08de65a2966a

x-ms-exchange-slblob-mailprops:

Tiovf1Kk+H/L9aKHoPn9H41xx/Z8qAxiISZkYvQHHLPt46hQe5G+xcokVXgKJbsFBP+todDen7DbRo5Vjgv5GNi660rYrY+9NeMHQPpXS751u0PiPDf/p7Z5EEOgTy64OBfti0ypb5GH5IzYqw42JgH+Ry4WoZToz1GXfJLLbX2tZuNL0zkLOk5SQl2EzCydIr2E6iX90ZXb0eK6ZjChonL3NJazk6l4Qnf71qWx21pAFXVC+6KGSM3l4w8hJboWm+NRxubbIM78nYHe3b1PSlgnD4RAV0BG80aDoDogRp3SyLTlLikKaLskBMdblKoYcRgvZk5p7a+QfuMEH+ib+nTls7xwoBkAQT8Yqlck0hh7eqqvNtmEBkQIYrkMXcOXfeViox9o5j/1eDDd0nXTbODW3wXqqTPLQzIvAQwmZjgfVUez0ufjXRipVZYWTbh8PLZa6r87dIlJtPirzDKRrnvfyzSZAi6y3jo57YZu8QZN7QGdYdCuxPiCY3CfJ2AXPuJXSA2LqEdqwEcuWs2FbqP0aAZbLsCYRvDdHpEnYiPMA4pdhiCpHfKp29RSnwZQ3nzVJTIi6+9Kd0PlJ9SM+N07BCiGlXn2dzqlMdUeR7Y=

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|19110799012|39105399006|461199028|15030799006|15080799012|8060799015|8062599012|39145399003|41105399003|40105399003|3412199025|440099028|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?0leOx6+pctDWc3gFzwdJdzFQoc8a41DUoZZ4IQ3u20OqYRkbv86SQogD?=

=?Windows-1252?Q?WQfPw+m+JyxBm9Dy2+u+PQJcvvYVsSmpFF/64bLzdJyehxm6vxu33OSS?=

=?Windows-1252?Q?7idGRZHeJwAHr5pdSREy3KpYx+f4PaNxtFlMyUuob4FmwkqdpQ/MEgQW?=

=?Windows-1252?Q?j5zAjeeF21AYW9fahfiBphWUdY6eH7AZDFwjoa8SDkCmHgEAepLHbWtE?=

=?Windows-1252?Q?UhzmA2G5ovyfr7qmlxkzhHQ3wOMz/l+pLeYNpTsv/NFAtshcXcEzRQNA?=

=?Windows-1252?Q?8mrzK+CtS5alyfBkV6MxD3yaMgN8xV4tOuH57S9AXHF1e6BUA8wZebfZ?=

=?Windows-1252?Q?JFF+dt5TAjseqRKTcOvgeR5A7ZuJaAGae2k5paDdXHZJAnqJgg6XlYS3?=

=?Windows-1252?Q?cXgcfgAUD6oNiN+NH20tN0AIVKL5sSgrF17yjAhF8TCXfmQa9VZcporZ?=

=?Windows-1252?Q?FIBVSoTx/8kcaGySXkOXYQPexSCuXVkNGJMGsX8k4rKC2AgUBVK2Y0pq?=

=?Windows-1252?Q?9bk7Z2Ep/IoBxYHMqvH/K9CNmO59B38+lbAFLNP/9RHwkSrCMb3i5VsL?=

=?Windows-1252?Q?QIhNnHJ+mS8DZ8EDOKuvTe2x24/844B/3kpnYJteioOiC3D8g7hT6f/O?=

=?Windows-1252?Q?HVaez/dzNQELnetE/udkx2rdqkX6wbs4eXYKoiFOeSrQkct9Ke2o3YeB?=

=?Windows-1252?Q?Pn/q93sXcjBaeWrHR/f9kN59JC4+//keX9XVR7d/FgubOqXMJ6qljXzj?=

=?Windows-1252?Q?b9B6ZZFAi/oRqQq31vTjEeOlRlOXjbYT2d/9mWXA1r1xot2cX1/0OU++?=

=?Windows-1252?Q?WDkrSV5uy0X1LkEQTJjfpsAvjy2PjF/IiCYElpHZN9Zuy796Y/WwLIYz?=

=?Windows-1252?Q?wjlOP6/4vf1rQ9CXwoCTfJBACEdP26ZnJvTEWr4wQZGyiVJG759BCA0v?=

=?Windows-1252?Q?Yh/p/ORoYaN9I0lxqVHbG0STdS0a84X27LYvn9XXJ0Dz5Fo/zb/n5TVv?=

=?Windows-1252?Q?dcBnmUoLapOZJ6+/cV3KIWVr/91u7/niWJJTifdumgK6UD/uxruqRxL7?=

=?Windows-1252?Q?cALr0FUHOcQjVsTb1JtlrkGCMD01AH4CggmzUEmFHELzqQmK3S/KtuVw?=

=?Windows-1252?Q?Hyv8TcIU+RJo7syUvvjOU/U0KlyU5qJLQ88cgpzhh9i9tIQSiTN9b0hs?=

=?Windows-1252?Q?O9x7rZx49F5JtddB4mRmFwVA39U9gpSFUy4qEmxAXg1T6c97Np8yzcwM?=

=?Windows-1252?Q?gS1bQwvcSA2ZaBHcLUM6vZyrLe2WFcYoyVklpZlDz+prVdJzy5DljqdM?=

=?Windows-1252?Q?O0sIDvI7EEztX2LZdjn/14vMk0G2cmxRkEPk6h/3qFCXbpBg/v2Ye2Qx?=

=?Windows-1252?Q?QmMfH6YKyo3g6YY0Jmjfbi80+Tf8O6QDmHE=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?MEhnJPh+GcFMvK9oqvBk6Mj9prH23WjJwCV6TGT7tmpUCpB/xuOM+AK7?=

=?Windows-1252?Q?rKYVXFyumNPj8RezaM/5rfD80eX+NMt8g3UBaFHk6TZVxBPZ4Q+AoPS/?=

=?Windows-1252?Q?BMcNEIbPQ00ViOJOlIyO1SGfYutJsxo1xjP/WfCZTIrVICZWGQzTjHDA?=

=?Windows-1252?Q?rUYSzCnnnjuHv0D0mL0PZpRckDE5/GVWVZZL6HhDEDHapF76fji7SPyL?=

=?Windows-1252?Q?14WL508OGGvxircqehjnQpY0fi1/U2B2pl9ZYsPNfYEkz1QZSg8IEHHY?=

=?Windows-1252?Q?YQe5YUb0tXQOHWJrwxQFDRqmxUEJJkC0h+69v5bMVlhiEIom30boKWeI?=

=?Windows-1252?Q?SdAjDFpuUZbNNi2AZzRWoXZnlQ7QFYz4vC7uClOPpubUiAeBUmxsuPQH?=

=?Windows-1252?Q?qcjP8jcg4CwgV92XEWs2oo65qL/RwM1fqK/+q0eFetnGRtZXIGBc9coV?=

=?Windows-1252?Q?Nq82/C2j8i/iIb+SdGBKSrMT9QljEaxNOkJ/BQ+yIkZd7MVvNR1hOW/7?=

=?Windows-1252?Q?5YdDyKUlDUdnSv6cCMGjQelw7nH7K53N2jkKhhZFtPS4iqXT1W+NnR42?=

=?Windows-1252?Q?4CEcXzwbq+8W6vHkM7ykCH1GLjZIe8/XkWnPg8h60YmoPvZRRreSAEcF?=

=?Windows-1252?Q?DL0LN5gV0AjSp8WJMxlU3ubxy4RboSIxYubA0DxB4eiSUec1spdYAOTe?=

=?Windows-1252?Q?6D2gE2oDB4pO3Pw1/Ww9vPw67x8bl31nnbNktRQgkRjoELu/34Y34UcD?=

=?Windows-1252?Q?rWOrhKGG7Q4JD4rNaLd5ZfioVdynN+2rIdQA1mnVUA/yvsRrqNjC0Sdx?=

=?Windows-1252?Q?BTOoRYlr4NQunJMH4ECjyCB9hB52wLQmZxGgmawIGAOgGyvrwu6rlts8?=

=?Windows-1252?Q?j64djcDX8GxHy/bpdaITm5rml5wCfNUKSo2iJ2ri3UPuTs10UBQLY6Zl?=

=?Windows-1252?Q?hpddlGlfxA8Rn54EFlGs2seOF1gU2oNFYJ1Pxdzvx6JwH1Keac7OWLXL?=

=?Windows-1252?Q?8Dof2YpKlS3bN0Rwh+AlZG//sa+I9lURSPFdS4u27JD/ExRyWLwqDAZ2?=

=?Windows-1252?Q?YTDEpo1XbFcDcfSBsqgrqMfE87Gq0ujril52NbubxAdxMQXqR7iCvS9Q?=

=?Windows-1252?Q?G1nFqT9f0vTQY3d2K269H8DOssla7um8uOhBM0DBmp9wLdmaHZOebwAu?=

=?Windows-1252?Q?IfmERbRH6mGmvE/KdD/TvSUwGwo54FwzqYx6E+M6x2UcaIQG+GWoXmaO?=

=?Windows-1252?Q?7Fd34jCx9iOzrmIzySWMKQ48hE3W24AuZvrTqtBOWZ4y0IU6V0BzD8FX?=

=?Windows-1252?Q?cQQl7vuXkCsE0bqLkwTWiCNcSE0s/HzQ6FRYvyCRkO4ligcnd5F3QD5T?=

=?Windows-1252?Q?oCpFuZuuBns8AVkQWymCEj0VwpiH4FOJLLnZ3RPLvWZaZ4lZ7IBGmWqq?=

=?Windows-1252?Q?CZQip0zD0L/RvCEM6l8cwXZoauv2Aqlfgo9u4ZtATdsRE18Wt8nXVDLC?=

=?Windows-1252?Q?FVVgNkBorzRHlObXr99rPY6NkVPFvlzkSvuUOkEJU/m5bvu+BXOjYgQd?=

=?Windows-1252?Q?wUpVKhnGeRuLics5HZ2ZfK6m3pEPV4FnhrOkHw=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_KL1PR0401MB45627CD0D48F7B4E31A8127DA666AKL1PR0401MB4562_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KL1PR0401MB4562.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: de5520b2-4065-4aa9-9b39-08de65a2966a

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Feb 2026 17:10:10.8546

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB7579



--_000_KL1PR0401MB45627CD0D48F7B4E31A8127DA666AKL1PR0401MB4562_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hello,



Your website has a few performance and SEO errors.



I can share a detailed report showing them.



We can also optimize your site to appear on Google=92s first page.



Shall I send our proposal and price list?



Thank you,

Mary Smith

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 09:04:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voOIo-000000007tz-49Wv

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 09:03:26 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 09:03:26 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wrqvqshf.outbound-mail.sendgrid.net ([149.72.70.15]:11504)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voMXA-00000000Hrt-1SZu

for root@nk.ca;

Fri, 06 Feb 2026 07:10:16 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ctnptwpr.xyz;

h=from:subject:date:mime-version:to:content-type:cc:content-type:date:

from:subject:to;

s=s1; bh=bWAEcRlpvLXvHmbLcY8bplkenIvfcNl/78g7caJ8fWc=;

b=HDPwqdD5G3pFrHbbQdTrKNvOolx8Rv0ZXS5wV24XAmySUzt81X/ZIixtYNGan8dRC5Gf

iUCP/2JdYe9I3ZPMs+hgQ69KsjdMyDO/txRaRTZCMJfRBgf9kY1AGgw9CB1qnKLgh0i4vY

e72jg8NsaA2KHw4W3+ii7azmhIunBdjK1JhpmjCPyuHd1aVC+Kl+dRWkhfQuiltS2ArDeT

jR9G36bqXBe3cI9b5ley9UAvvqQ3y6DAyjXoDCmBvJJ2AxI6/jWoVKsgSEFBm0kK+ZMHY1

7uaySH7K8LqLVrSoZvQ1EUuaZ4OAXQcKwW2K6fBCNMa09uZgrm1Wuth+T58lurog==

Received: by recvd-5f7d95d75d-q6hjb with SMTP id recvd-5f7d95d75d-q6hjb-1-6985F60B-3B

2026-02-06 14:09:15.291721294 +0000 UTC m=+4377779.861054050

Received: from ahomi.art (unknown)

by geopod-ismtpd-13 (SG) with ESMTP

id sD6llR8sTSujxaYU_Xehvw

for ;

Fri, 06 Feb 2026 14:09:15.197 +0000 (UTC)

Message-Id: <95f7fd2352dad304bb9752b82cc7ebca@ctnptwpr.xyz>

From: no-reply

Subject: Tax Documentation Notice =?UTF-8?B?4oCT?= W-8BEN Has Expired and

Requires Renewal

Date: Fri, 06 Feb 2026 14:09:15 +0000 (UTC)

X-Priority: 5

X-Mailer: juybxrdfrht zbylbcqdg vstphtpluoyg 564.81068

Mime-Version: 1.0

X-SG-EID:

=?us-ascii?Q?u001=2EOWhKS4YezuG0HicfR37AGN04y0ypBjSy72As5qZqelRbOafXV8vygAbVe?=

=?us-ascii?Q?jhjNrVp8+Ltce7SGIc=2FvfCGv0gMiOZKIMJWquCj?=

=?us-ascii?Q?VZvE2w1QL6stQgmB91KbyT+RnueHFat=2F83pDK7r?=

=?us-ascii?Q?fh89W3pdduSTTIq7ydTUVEHE+PbfETLfCd=2FZP1c?=

=?us-ascii?Q?XGbe5lLLZWaGs+R1kHFOvv+aObIqJiyIOvJHvt0?=

=?us-ascii?Q?CHILb5zbcp0pV2IW+5BLbA=3D?=

To: root

X-Entity-ID: u001.JFEV++DhVprx2m2mQjpDlw==

Content-Type: multipart/alternative;

boundary="35779f435b8af04443066e31000ddee1"

X-Spam_score: 52.6

X-Spam_score_int: 526

X-Spam_bar: +++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Compliance Update – Expired W-8BEN Requires Immediate RenewalDear

Client,This communication serves as a formal compliance update regarding

the tax documentation on file for your account. Our records [...]



Content analysis details: (52.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

[149.72.70.15 listed in dnsbl.ahbl.org]

[149.72.70.15 listed in dnsbl.ahbl.org]

[149.72.70.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.5 FROM_DOMAIN_NOVOWEL From: domain has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.7 SARE_XMAIL_SUSP2 X-Mailer suggests spam (variant 2)

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: ctnptwpr.xyz (xyz)]

0.6 J_CHICKENPOX_27 BODY: 2alpha-pock-7alpha

0.6 J_CHICKENPOX_64 BODY: 6alpha-pock-4alpha

0.6 J_CHICKENPOX_32 BODY: 3alpha-pock-2alpha

0.6 J_CHICKENPOX_44 BODY: 4alpha-pock-4alpha

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.8 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

2.5 XM_RANDOM X-Mailer apparently random

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} Tax Documentation Notice =?UTF-8?B?4oCT?= W-8BEN Has Expired and

Requires Renewal





TD TD Direct Investing Logo

Compliance Update – Expired W-8BEN Requires Immediate Renewal



Dear Client,



This communication serves as a formal compliance update regarding the tax documentation on file for your account. Our records confirm that the W-8BEN form previously submitted has expired and is no longer valid for withholding or reporting purposes. The W-8BEN is a mandatory document used to establish foreign tax status and determine appropriate tax treatment.



Once a W-8BEN expires, it cannot be used to support preferential withholding rates or tax treaty benefits. In the absence of a valid form, applicable regulations may require default withholding measures to be applied to your account until updated documentation is received and approved.



To restore compliant tax documentation, you are required to submit a renewed W-8BEN. The renewal process is completed through our secure online system and must be submitted for review before compliant tax treatment can resume.



Please access the secure system using the link below:



Complete Update



Login with the email address you used to register to complete your application today, or access your application using your WebBroker Username/Connect ID and password, or your EasyWeb Username/Access Card and password.

Questions? We're Ready to Help!



Call 1‑800‑465‑5463 to speak to a licensed Investment Representative from Monday to Friday, 7:00 a.m. to 10:00 p.m. EST (one-hour extension).



Thank you,



TD Direct Investing

Contact Us | Privacy & Security | Legal



TD Direct Investing is a division of TD Waterhouse Canada Inc., a subsidiary of The Toronto‑Dominion Bank.



® The TD logo and other TD trademarks are the property of The Toronto‑Dominion Bank or its subsidiaries.



If you wish to unsubscribe from receiving commercial electronic messages from TD Bank Group, please click here

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 09:04:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voOIo-000000007tz-49Wv

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 09:03:26 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 09:03:26 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wrqvqshf.outbound-mail.sendgrid.net ([149.72.70.15]:11504)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voMXA-00000000Hrt-1SZu

for root@nk.ca;

Fri, 06 Feb 2026 07:10:16 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ctnptwpr.xyz;

h=from:subject:date:mime-version:to:content-type:cc:content-type:date:

from:subject:to;

s=s1; bh=bWAEcRlpvLXvHmbLcY8bplkenIvfcNl/78g7caJ8fWc=;

b=HDPwqdD5G3pFrHbbQdTrKNvOolx8Rv0ZXS5wV24XAmySUzt81X/ZIixtYNGan8dRC5Gf

iUCP/2JdYe9I3ZPMs+hgQ69KsjdMyDO/txRaRTZCMJfRBgf9kY1AGgw9CB1qnKLgh0i4vY

e72jg8NsaA2KHw4W3+ii7azmhIunBdjK1JhpmjCPyuHd1aVC+Kl+dRWkhfQuiltS2ArDeT

jR9G36bqXBe3cI9b5ley9UAvvqQ3y6DAyjXoDCmBvJJ2AxI6/jWoVKsgSEFBm0kK+ZMHY1

7uaySH7K8LqLVrSoZvQ1EUuaZ4OAXQcKwW2K6fBCNMa09uZgrm1Wuth+T58lurog==

Received: by recvd-5f7d95d75d-q6hjb with SMTP id recvd-5f7d95d75d-q6hjb-1-6985F60B-3B

2026-02-06 14:09:15.291721294 +0000 UTC m=+4377779.861054050

Received: from ahomi.art (unknown)

by geopod-ismtpd-13 (SG) with ESMTP

id sD6llR8sTSujxaYU_Xehvw

for ;

Fri, 06 Feb 2026 14:09:15.197 +0000 (UTC)

Message-Id: <95f7fd2352dad304bb9752b82cc7ebca@ctnptwpr.xyz>

From: no-reply

Subject: Tax Documentation Notice =?UTF-8?B?4oCT?= W-8BEN Has Expired and

Requires Renewal

Date: Fri, 06 Feb 2026 14:09:15 +0000 (UTC)

X-Priority: 5

X-Mailer: juybxrdfrht zbylbcqdg vstphtpluoyg 564.81068

Mime-Version: 1.0

X-SG-EID:

=?us-ascii?Q?u001=2EOWhKS4YezuG0HicfR37AGN04y0ypBjSy72As5qZqelRbOafXV8vygAbVe?=

=?us-ascii?Q?jhjNrVp8+Ltce7SGIc=2FvfCGv0gMiOZKIMJWquCj?=

=?us-ascii?Q?VZvE2w1QL6stQgmB91KbyT+RnueHFat=2F83pDK7r?=

=?us-ascii?Q?fh89W3pdduSTTIq7ydTUVEHE+PbfETLfCd=2FZP1c?=

=?us-ascii?Q?XGbe5lLLZWaGs+R1kHFOvv+aObIqJiyIOvJHvt0?=

=?us-ascii?Q?CHILb5zbcp0pV2IW+5BLbA=3D?=

To: root

X-Entity-ID: u001.JFEV++DhVprx2m2mQjpDlw==

Content-Type: multipart/alternative;

boundary="35779f435b8af04443066e31000ddee1"

X-Spam_score: 52.6

X-Spam_score_int: 526

X-Spam_bar: +++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Compliance Update – Expired W-8BEN Requires Immediate RenewalDear

Client,This communication serves as a formal compliance update regarding

the tax documentation on file for your account. Our records [...]



Content analysis details: (52.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

[149.72.70.15 listed in dnsbl.ahbl.org]

[149.72.70.15 listed in dnsbl.ahbl.org]

[149.72.70.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.5 FROM_DOMAIN_NOVOWEL From: domain has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.7 SARE_XMAIL_SUSP2 X-Mailer suggests spam (variant 2)

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: ctnptwpr.xyz (xyz)]

0.6 J_CHICKENPOX_27 BODY: 2alpha-pock-7alpha

0.6 J_CHICKENPOX_64 BODY: 6alpha-pock-4alpha

0.6 J_CHICKENPOX_32 BODY: 3alpha-pock-2alpha

0.6 J_CHICKENPOX_44 BODY: 4alpha-pock-4alpha

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.8 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

2.5 XM_RANDOM X-Mailer apparently random

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} Tax Documentation Notice =?UTF-8?B?4oCT?= W-8BEN Has Expired and

Requires Renewal



TD TD Direct Investing Logo

Compliance Update – Expired W-8BEN Requires Immediate Renewal



Dear Client,



This communication serves as a formal compliance update regarding the tax documentation on file for your account. Our records confirm that the W-8BEN form previously submitted has expired and is no longer valid for withholding or reporting purposes. The W-8BEN is a mandatory document used to establish foreign tax status and determine appropriate tax treatment.



Once a W-8BEN expires, it cannot be used to support preferential withholding rates or tax treaty benefits. In the absence of a valid form, applicable regulations may require default withholding measures to be applied to your account until updated documentation is received and approved.



To restore compliant tax documentation, you are required to submit a renewed W-8BEN. The renewal process is completed through our secure online system and must be submitted for review before compliant tax treatment can resume.



Please access the secure system using the link below:



Complete Update



Login with the email address you used to register to complete your application today, or access your application using your WebBroker Username/Connect ID and password, or your EasyWeb Username/Access Card and password.

Questions? We're Ready to Help!



Call 1‑800‑465‑5463 to speak to a licensed Investment Representative from Monday to Friday, 7:00 a.m. to 10:00 p.m. EST (one-hour extension).



Thank you,



TD Direct Investing

Contact Us | Privacy & Security | Legal



TD Direct Investing is a division of TD Waterhouse Canada Inc., a subsidiary of The Toronto‑Dominion Bank.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 07:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voMXD-00000000KHj-3iT3

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 07:10:11 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 07:10:11 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from region.emg.fm ([109.235.208.74]:50392)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voM2u-00000000Fdi-0Ivw

for doctor@nk.ca;

Fri, 06 Feb 2026 06:39:00 -0700

Received: from region.emg.fm (region.emg.fm [127.0.0.1])

by region.emg.fm (Postfix) with ESMTP id 4f6wBT2sQQz7bjsl

for ; Fri, 6 Feb 2026 16:37:37 +0300 (MSK)

Authentication-Results: region.emg.fm (amavis); dkim=pass

reason="pass (just generated, assumed good)" header.d=region.emg.fm

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=region.emg.fm; h=

content-transfer-encoding:content-type:message-id:user-agent

:subject:to:from:date:mime-version; s=dkim; t=1770385056; x=

1772977057; bh=FI835rPG3TA/7YvKDmucTGi80C95DRQ5B9OretpWOqk=; b=M

8+fOwgvuCFewUb+e1XZzNFUqL7Z4OOYmANE7x5rD8N4wPd9eEbiuZUwhN1OEK3dP

/O2czRL19t6uS4Q9y5H2rrBPSX9atPEyjug109QHG+Gr1azZTd75KZTB1/pappBf

lo1fFZ6Kb6q23AncngY9AyU0XU8I1VLhhTtxR0H8RaGjwYDdQcCAxUlMm4EIF0mg

PnXzVakcqHVLvV7PBWREjJRfj0cYWu4GumxqIG8zXxxKMCX7qy4aJbaRW1ed/LWR

Kvj4WraJAKceMTo848jbwE5RE2kA2dHj7k7O83fB66S5RkF0f/eV08tyBTCmIoSO

Br8/eiF6Onqi6yXlYoAVA==

X-Virus-Scanned: amavis at region.emg.fm

X-Spam-Flag: NO

X-Spam-Score: 4.318

X-Spam-Level: ****

X-Spam-Status: No, score=4.318 tagged_above=2 required=6.2

tests=[ALL_TRUSTED=-1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1,

LOTS_OF_MONEY=0.001, MILLION_HUNDRED=0.001, MONEY_FORM_SHORT=0.001,

MONEY_NOHTML=2.499, T_FILL_THIS_FORM_SHORT=0.01, UNDISC_MONEY=1.805]

autolearn=no autolearn_force=no

Received: from region.emg.fm ([127.0.0.1])

by region.emg.fm (region.emg.fm [127.0.0.1]) (amavis, port 10026) with ESMTP

id 6t8FivZHuEcL for ; Fri, 6 Feb 2026 16:37:36 +0300 (MSK)

Received: from localhost (region.emg.fm [127.0.0.1])

by region.emg.fm (Postfix) with ESMTPSA id 4f6wBH6gNpz7bcjL;

Fri, 6 Feb 2026 16:37:27 +0300 (MSK)

MIME-Version: 1.0

Date: Fri, 06 Feb 2026 05:37:27 -0800

From: Financial Crimes Enforcement

To: undisclosed-recipients:;

Subject: Greetings

User-Agent: Roundcube Webmail

Message-ID:

X-Sender: ust-fincen.us@outlook.com

Content-Type: text/plain; charset=US-ASCII;

format=flowed

Content-Transfer-Encoding: 7bit

X-Spam_score: 16.3

X-Spam_score_int: 163

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Financial Crimes Enforcement Network (FinCEN) P.O. Box 39

Vienna, Virginia, 22183 Date:6/02/2026 Greetings, We hope this finds you well.

Your pending transaction, intercepted by FinCEN, has been fully reviewed

and approved for release.



Content analysis details: (16.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.235.208.74 listed in dnsbl.ahbl.org]

[109.235.208.74 listed in dnsbl.ahbl.org]

[109.235.208.74 listed in dnsbl.ahbl.org]

[109.235.208.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.235.208.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.235.208.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.235.208.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.235.208.74 listed in dnsbl.ahbl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ust-fincen.us(at)outlook.com]

2.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

1.0 SPOOFED_FREEMAIL No description available.

Subject: {SPAM?} Greetings



Financial Crimes Enforcement Network (FinCEN)

P.O. Box 39

Vienna, Virginia, 22183



Date:6/02/2026



Greetings,

We hope this finds you well. Your pending transaction, intercepted by

FinCEN, has been fully reviewed and approved for release.



The sum of Ten Million Five Hundred Thousand Dollars has been confirmed

legitimate and will be paid via Online Banking Payment, accessible from

your location.



To issue your Payment Release Certificate and complete the transfer,

please provide:

Full Name

Address

Contact Number

Government-issued ID (scan copy)



Send the above to gacki.andrea@yahoo.com, After verification, we will

issue your certificate and provide instructions to access your funds.



Thank you for your cooperation.

Sincerely,

Andrea Gacki

Director Financial Crimes Enforcement Network (FinCEN)