NetKnow Corporate Blog

--_000_KL1PR0401MB45627CD0D48F7B4E31A8127DA666AKL1PR0401MB4562_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">







































--_000_KL1PR0401MB45627CD0D48F7B4E31A8127DA666AKL1PR0401MB4562_--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Fri, 06 Feb 2026 10:11:53 -0700

Received: from mail-japaneastazolkn19012056.outbound.protection.outlook.com ([52.103.43.56]:5562 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voPMr-00000000FAO-1vu8

for dave@nk.ca;

Fri, 06 Feb 2026 10:11:52 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=pS2Q99krkuId6YvcFvHuVNUBkoz3esyD3N2n8TqrJgfccPlTUsJmwJ5elNUyh6GQC5EXTqEl86dEF29nidBVQVnlq+R7Rbwe+uZjtRTtXcXTQVbfkIbgithYqBAABUCF8GWvfmNTDxRPxHE9bztMCv1+odjwxyaaPBt+jU/UVaCAKZX8M6WqQyHoThRABCs9vPCLoBRbgjD1LR6SvXwbBgsVfQDdhzC5St7g2CN3dkg7ylkssGZhwMt8e+qXRCJgfmxEAXB8YVZYMfI+VFXCyQ9DhSmABySQBS8oiHae1PGjH1eG9gtH9cCbw9wlNo98PBtmfDN1s5DSrTvJoaP8Wg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=wiourjKM/4C3o5cGbR8AJgMpY2d1gI0BgPVvu6fFyZ0=;

b=e0/gFtQcrRiwf1jbf+GBTC9rfjxSjbkasUsdbuu9hmh7fvuAvQCZ0FwJ3l6v4CNOOuUAfx384rKtOIXQ3ugTj7Xq1sIyhEUUUMVZaCjrQOoN6hqfW1CV4qha2cNldJ3nL7g3pdnwjefeandoKfCE+3wb4mR4J2E3xYKbsOM8J+A8PIgZ2VUFcN4qyF2YZclZlGXG4EdtCapdZGkAn0YbYDukQjBJAuWaNhf1tgLe+kNsnIbsaqSOD3cz9A1vRfSjMfeVIIe9BnFdzglYiiVqMmxeFcF9eBrSyGxgzUmVJD/5RS/byplMUDUQVwXnriLjYQ1sA3OFRddy5jL+a19nWg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=wiourjKM/4C3o5cGbR8AJgMpY2d1gI0BgPVvu6fFyZ0=;

b=ExKqy+X5KgH9kLdSA1QT+gkk/200Okk8BhSk7vLjRhxH9Xth8tUZnSX6pN0fmYd5UfyAr4eq7SLcV79MFb+KLa0PgiGizztrOllaQujefE3OYU32jIdW1QIRznVf+/ZKkD3rPmKhZIY0pXYzLsYwWHXk5Wj8p0caGP3oMmdFkOZ1kTe1qmCXzedQqrstyMmJNN99Z1DQ1uO07oEKVhIH63qpXuOr8nAovzl6ISkMmhibp2Ne9ka0a9rnT9ni4KgGipZodAPwSqxen1NaSlAS00g1d0uK/1/D2xm3d4OEj8ptRpOL5E4EP4+NA7LBRgG71tpDgC5TPhcekU/5OKih9w==

Received: from KL1PR0401MB4562.apcprd04.prod.outlook.com

(2603:1096:820:5b::12) by TYZPR04MB7579.apcprd04.prod.outlook.com

(2603:1096:405:3c::13) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9587.14; Fri, 6 Feb

2026 17:10:12 +0000

Received: from KL1PR0401MB4562.apcprd04.prod.outlook.com

([fe80::e931:588c:1bd3:fda9]) by KL1PR0401MB4562.apcprd04.prod.outlook.com

([fe80::e931:588c:1bd3:fda9%6]) with mapi id 15.20.9587.013; Fri, 6 Feb 2026

17:10:11 +0000

From: Mary Smith

To: Mary Smith

Subject: Re: Google's first page?

Thread-Topic: Google's first page?

Thread-Index: AQHcl4tQJGAHgRDyiUS6+rOZ8KxhjQ==

Date: Fri, 6 Feb 2026 17:10:10 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KL1PR0401MB4562:EE_|TYZPR04MB7579:EE_

x-ms-office365-filtering-correlation-id: de5520b2-4065-4aa9-9b39-08de65a2966a

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|19110799012|39105399006|461199028|15030799006|15080799012|8060799015|8062599012|39145399003|41105399003|40105399003|3412199025|440099028|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?0leOx6+pctDWc3gFzwdJdzFQoc8a41DUoZZ4IQ3u20OqYRkbv86SQogD?=

=?Windows-1252?Q?WQfPw+m+JyxBm9Dy2+u+PQJcvvYVsSmpFF/64bLzdJyehxm6vxu33OSS?=

=?Windows-1252?Q?7idGRZHeJwAHr5pdSREy3KpYx+f4PaNxtFlMyUuob4FmwkqdpQ/MEgQW?=

=?Windows-1252?Q?j5zAjeeF21AYW9fahfiBphWUdY6eH7AZDFwjoa8SDkCmHgEAepLHbWtE?=

=?Windows-1252?Q?UhzmA2G5ovyfr7qmlxkzhHQ3wOMz/l+pLeYNpTsv/NFAtshcXcEzRQNA?=

=?Windows-1252?Q?8mrzK+CtS5alyfBkV6MxD3yaMgN8xV4tOuH57S9AXHF1e6BUA8wZebfZ?=

=?Windows-1252?Q?JFF+dt5TAjseqRKTcOvgeR5A7ZuJaAGae2k5paDdXHZJAnqJgg6XlYS3?=

=?Windows-1252?Q?cXgcfgAUD6oNiN+NH20tN0AIVKL5sSgrF17yjAhF8TCXfmQa9VZcporZ?=

=?Windows-1252?Q?FIBVSoTx/8kcaGySXkOXYQPexSCuXVkNGJMGsX8k4rKC2AgUBVK2Y0pq?=

=?Windows-1252?Q?9bk7Z2Ep/IoBxYHMqvH/K9CNmO59B38+lbAFLNP/9RHwkSrCMb3i5VsL?=

=?Windows-1252?Q?QIhNnHJ+mS8DZ8EDOKuvTe2x24/844B/3kpnYJteioOiC3D8g7hT6f/O?=

=?Windows-1252?Q?HVaez/dzNQELnetE/udkx2rdqkX6wbs4eXYKoiFOeSrQkct9Ke2o3YeB?=

=?Windows-1252?Q?Pn/q93sXcjBaeWrHR/f9kN59JC4+//keX9XVR7d/FgubOqXMJ6qljXzj?=

=?Windows-1252?Q?b9B6ZZFAi/oRqQq31vTjEeOlRlOXjbYT2d/9mWXA1r1xot2cX1/0OU++?=

=?Windows-1252?Q?WDkrSV5uy0X1LkEQTJjfpsAvjy2PjF/IiCYElpHZN9Zuy796Y/WwLIYz?=

=?Windows-1252?Q?wjlOP6/4vf1rQ9CXwoCTfJBACEdP26ZnJvTEWr4wQZGyiVJG759BCA0v?=

=?Windows-1252?Q?Yh/p/ORoYaN9I0lxqVHbG0STdS0a84X27LYvn9XXJ0Dz5Fo/zb/n5TVv?=

=?Windows-1252?Q?dcBnmUoLapOZJ6+/cV3KIWVr/91u7/niWJJTifdumgK6UD/uxruqRxL7?=

=?Windows-1252?Q?cALr0FUHOcQjVsTb1JtlrkGCMD01AH4CggmzUEmFHELzqQmK3S/KtuVw?=

=?Windows-1252?Q?Hyv8TcIU+RJo7syUvvjOU/U0KlyU5qJLQ88cgpzhh9i9tIQSiTN9b0hs?=

=?Windows-1252?Q?O9x7rZx49F5JtddB4mRmFwVA39U9gpSFUy4qEmxAXg1T6c97Np8yzcwM?=

=?Windows-1252?Q?gS1bQwvcSA2ZaBHcLUM6vZyrLe2WFcYoyVklpZlDz+prVdJzy5DljqdM?=

=?Windows-1252?Q?O0sIDvI7EEztX2LZdjn/14vMk0G2cmxRkEPk6h/3qFCXbpBg/v2Ye2Qx?=

=?Windows-1252?Q?QmMfH6YKyo3g6YY0Jmjfbi80+Tf8O6QDmHE=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?MEhnJPh+GcFMvK9oqvBk6Mj9prH23WjJwCV6TGT7tmpUCpB/xuOM+AK7?=

=?Windows-1252?Q?rKYVXFyumNPj8RezaM/5rfD80eX+NMt8g3UBaFHk6TZVxBPZ4Q+AoPS/?=

=?Windows-1252?Q?BMcNEIbPQ00ViOJOlIyO1SGfYutJsxo1xjP/WfCZTIrVICZWGQzTjHDA?=

=?Windows-1252?Q?rUYSzCnnnjuHv0D0mL0PZpRckDE5/GVWVZZL6HhDEDHapF76fji7SPyL?=

=?Windows-1252?Q?14WL508OGGvxircqehjnQpY0fi1/U2B2pl9ZYsPNfYEkz1QZSg8IEHHY?=

=?Windows-1252?Q?YQe5YUb0tXQOHWJrwxQFDRqmxUEJJkC0h+69v5bMVlhiEIom30boKWeI?=

=?Windows-1252?Q?SdAjDFpuUZbNNi2AZzRWoXZnlQ7QFYz4vC7uClOPpubUiAeBUmxsuPQH?=

=?Windows-1252?Q?qcjP8jcg4CwgV92XEWs2oo65qL/RwM1fqK/+q0eFetnGRtZXIGBc9coV?=

=?Windows-1252?Q?Nq82/C2j8i/iIb+SdGBKSrMT9QljEaxNOkJ/BQ+yIkZd7MVvNR1hOW/7?=

=?Windows-1252?Q?5YdDyKUlDUdnSv6cCMGjQelw7nH7K53N2jkKhhZFtPS4iqXT1W+NnR42?=

=?Windows-1252?Q?4CEcXzwbq+8W6vHkM7ykCH1GLjZIe8/XkWnPg8h60YmoPvZRRreSAEcF?=

=?Windows-1252?Q?DL0LN5gV0AjSp8WJMxlU3ubxy4RboSIxYubA0DxB4eiSUec1spdYAOTe?=

=?Windows-1252?Q?6D2gE2oDB4pO3Pw1/Ww9vPw67x8bl31nnbNktRQgkRjoELu/34Y34UcD?=

=?Windows-1252?Q?rWOrhKGG7Q4JD4rNaLd5ZfioVdynN+2rIdQA1mnVUA/yvsRrqNjC0Sdx?=

=?Windows-1252?Q?BTOoRYlr4NQunJMH4ECjyCB9hB52wLQmZxGgmawIGAOgGyvrwu6rlts8?=

=?Windows-1252?Q?j64djcDX8GxHy/bpdaITm5rml5wCfNUKSo2iJ2ri3UPuTs10UBQLY6Zl?=

=?Windows-1252?Q?hpddlGlfxA8Rn54EFlGs2seOF1gU2oNFYJ1Pxdzvx6JwH1Keac7OWLXL?=

=?Windows-1252?Q?8Dof2YpKlS3bN0Rwh+AlZG//sa+I9lURSPFdS4u27JD/ExRyWLwqDAZ2?=

=?Windows-1252?Q?YTDEpo1XbFcDcfSBsqgrqMfE87Gq0ujril52NbubxAdxMQXqR7iCvS9Q?=

=?Windows-1252?Q?G1nFqT9f0vTQY3d2K269H8DOssla7um8uOhBM0DBmp9wLdmaHZOebwAu?=

=?Windows-1252?Q?IfmERbRH6mGmvE/KdD/TvSUwGwo54FwzqYx6E+M6x2UcaIQG+GWoXmaO?=

=?Windows-1252?Q?7Fd34jCx9iOzrmIzySWMKQ48hE3W24AuZvrTqtBOWZ4y0IU6V0BzD8FX?=

=?Windows-1252?Q?cQQl7vuXkCsE0bqLkwTWiCNcSE0s/HzQ6FRYvyCRkO4ligcnd5F3QD5T?=

=?Windows-1252?Q?oCpFuZuuBns8AVkQWymCEj0VwpiH4FOJLLnZ3RPLvWZaZ4lZ7IBGmWqq?=

=?Windows-1252?Q?CZQip0zD0L/RvCEM6l8cwXZoauv2Aqlfgo9u4ZtATdsRE18Wt8nXVDLC?=

=?Windows-1252?Q?FVVgNkBorzRHlObXr99rPY6NkVPFvlzkSvuUOkEJU/m5bvu+BXOjYgQd?=

=?Windows-1252?Q?wUpVKhnGeRuLics5HZ2ZfK6m3pEPV4FnhrOkHw=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_KL1PR0401MB45627CD0D48F7B4E31A8127DA666AKL1PR0401MB4562_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KL1PR0401MB4562.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: de5520b2-4065-4aa9-9b39-08de65a2966a

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Feb 2026 17:10:10.8546

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB7579



--_000_KL1PR0401MB45627CD0D48F7B4E31A8127DA666AKL1PR0401MB4562_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hello,



Your website has a few performance and SEO errors.



I can share a detailed report showing them.



We can also optimize your site to appear on Google=92s first page.



Shall I send our proposal and price list?



Thank you,

Mary Smith

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 09:04:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voOIo-000000007tz-49Wv

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 09:03:26 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 09:03:26 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wrqvqshf.outbound-mail.sendgrid.net ([149.72.70.15]:11504)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voMXA-00000000Hrt-1SZu

for root@nk.ca;

Fri, 06 Feb 2026 07:10:16 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ctnptwpr.xyz;

h=from:subject:date:mime-version:to:content-type:cc:content-type:date:

from:subject:to;

s=s1; bh=bWAEcRlpvLXvHmbLcY8bplkenIvfcNl/78g7caJ8fWc=;

b=HDPwqdD5G3pFrHbbQdTrKNvOolx8Rv0ZXS5wV24XAmySUzt81X/ZIixtYNGan8dRC5Gf

iUCP/2JdYe9I3ZPMs+hgQ69KsjdMyDO/txRaRTZCMJfRBgf9kY1AGgw9CB1qnKLgh0i4vY

e72jg8NsaA2KHw4W3+ii7azmhIunBdjK1JhpmjCPyuHd1aVC+Kl+dRWkhfQuiltS2ArDeT

jR9G36bqXBe3cI9b5ley9UAvvqQ3y6DAyjXoDCmBvJJ2AxI6/jWoVKsgSEFBm0kK+ZMHY1

7uaySH7K8LqLVrSoZvQ1EUuaZ4OAXQcKwW2K6fBCNMa09uZgrm1Wuth+T58lurog==

Received: by recvd-5f7d95d75d-q6hjb with SMTP id recvd-5f7d95d75d-q6hjb-1-6985F60B-3B

2026-02-06 14:09:15.291721294 +0000 UTC m=+4377779.861054050

Received: from ahomi.art (unknown)

by geopod-ismtpd-13 (SG) with ESMTP

id sD6llR8sTSujxaYU_Xehvw

for ;

Fri, 06 Feb 2026 14:09:15.197 +0000 (UTC)

Message-Id: <95f7fd2352dad304bb9752b82cc7ebca@ctnptwpr.xyz>

From: no-reply

Subject: Tax Documentation Notice =?UTF-8?B?4oCT?= W-8BEN Has Expired and

Requires Renewal

Date: Fri, 06 Feb 2026 14:09:15 +0000 (UTC)

X-Priority: 5

X-Mailer: juybxrdfrht zbylbcqdg vstphtpluoyg 564.81068

Mime-Version: 1.0

X-SG-EID:

=?us-ascii?Q?u001=2EOWhKS4YezuG0HicfR37AGN04y0ypBjSy72As5qZqelRbOafXV8vygAbVe?=

=?us-ascii?Q?jhjNrVp8+Ltce7SGIc=2FvfCGv0gMiOZKIMJWquCj?=

=?us-ascii?Q?VZvE2w1QL6stQgmB91KbyT+RnueHFat=2F83pDK7r?=

=?us-ascii?Q?fh89W3pdduSTTIq7ydTUVEHE+PbfETLfCd=2FZP1c?=

=?us-ascii?Q?XGbe5lLLZWaGs+R1kHFOvv+aObIqJiyIOvJHvt0?=

=?us-ascii?Q?CHILb5zbcp0pV2IW+5BLbA=3D?=

To: root

X-Entity-ID: u001.JFEV++DhVprx2m2mQjpDlw==

Content-Type: multipart/alternative;

boundary="35779f435b8af04443066e31000ddee1"

X-Spam_score: 52.6

X-Spam_score_int: 526

X-Spam_bar: +++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Compliance Update – Expired W-8BEN Requires Immediate RenewalDear

Client,This communication serves as a formal compliance update regarding

the tax documentation on file for your account. Our records [...]



Content analysis details: (52.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

[149.72.70.15 listed in dnsbl.ahbl.org]

[149.72.70.15 listed in dnsbl.ahbl.org]

[149.72.70.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.5 FROM_DOMAIN_NOVOWEL From: domain has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.7 SARE_XMAIL_SUSP2 X-Mailer suggests spam (variant 2)

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: ctnptwpr.xyz (xyz)]

0.6 J_CHICKENPOX_27 BODY: 2alpha-pock-7alpha

0.6 J_CHICKENPOX_64 BODY: 6alpha-pock-4alpha

0.6 J_CHICKENPOX_32 BODY: 3alpha-pock-2alpha

0.6 J_CHICKENPOX_44 BODY: 4alpha-pock-4alpha

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.8 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

2.5 XM_RANDOM X-Mailer apparently random

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} Tax Documentation Notice =?UTF-8?B?4oCT?= W-8BEN Has Expired and

Requires Renewal





TD TD Direct Investing Logo

Compliance Update – Expired W-8BEN Requires Immediate Renewal



Dear Client,



This communication serves as a formal compliance update regarding the tax documentation on file for your account. Our records confirm that the W-8BEN form previously submitted has expired and is no longer valid for withholding or reporting purposes. The W-8BEN is a mandatory document used to establish foreign tax status and determine appropriate tax treatment.



Once a W-8BEN expires, it cannot be used to support preferential withholding rates or tax treaty benefits. In the absence of a valid form, applicable regulations may require default withholding measures to be applied to your account until updated documentation is received and approved.



To restore compliant tax documentation, you are required to submit a renewed W-8BEN. The renewal process is completed through our secure online system and must be submitted for review before compliant tax treatment can resume.



Please access the secure system using the link below:



Complete Update



Login with the email address you used to register to complete your application today, or access your application using your WebBroker Username/Connect ID and password, or your EasyWeb Username/Access Card and password.

Questions? We're Ready to Help!



Call 1‑800‑465‑5463 to speak to a licensed Investment Representative from Monday to Friday, 7:00 a.m. to 10:00 p.m. EST (one-hour extension).



Thank you,



TD Direct Investing

Contact Us | Privacy & Security | Legal



TD Direct Investing is a division of TD Waterhouse Canada Inc., a subsidiary of The Toronto‑Dominion Bank.



® The TD logo and other TD trademarks are the property of The Toronto‑Dominion Bank or its subsidiaries.



If you wish to unsubscribe from receiving commercial electronic messages from TD Bank Group, please click here

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 09:04:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voOIo-000000007tz-49Wv

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 09:03:26 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 09:03:26 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wrqvqshf.outbound-mail.sendgrid.net ([149.72.70.15]:11504)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voMXA-00000000Hrt-1SZu

for root@nk.ca;

Fri, 06 Feb 2026 07:10:16 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ctnptwpr.xyz;

h=from:subject:date:mime-version:to:content-type:cc:content-type:date:

from:subject:to;

s=s1; bh=bWAEcRlpvLXvHmbLcY8bplkenIvfcNl/78g7caJ8fWc=;

b=HDPwqdD5G3pFrHbbQdTrKNvOolx8Rv0ZXS5wV24XAmySUzt81X/ZIixtYNGan8dRC5Gf

iUCP/2JdYe9I3ZPMs+hgQ69KsjdMyDO/txRaRTZCMJfRBgf9kY1AGgw9CB1qnKLgh0i4vY

e72jg8NsaA2KHw4W3+ii7azmhIunBdjK1JhpmjCPyuHd1aVC+Kl+dRWkhfQuiltS2ArDeT

jR9G36bqXBe3cI9b5ley9UAvvqQ3y6DAyjXoDCmBvJJ2AxI6/jWoVKsgSEFBm0kK+ZMHY1

7uaySH7K8LqLVrSoZvQ1EUuaZ4OAXQcKwW2K6fBCNMa09uZgrm1Wuth+T58lurog==

Received: by recvd-5f7d95d75d-q6hjb with SMTP id recvd-5f7d95d75d-q6hjb-1-6985F60B-3B

2026-02-06 14:09:15.291721294 +0000 UTC m=+4377779.861054050

Received: from ahomi.art (unknown)

by geopod-ismtpd-13 (SG) with ESMTP

id sD6llR8sTSujxaYU_Xehvw

for ;

Fri, 06 Feb 2026 14:09:15.197 +0000 (UTC)

Message-Id: <95f7fd2352dad304bb9752b82cc7ebca@ctnptwpr.xyz>

From: no-reply

Subject: Tax Documentation Notice =?UTF-8?B?4oCT?= W-8BEN Has Expired and

Requires Renewal

Date: Fri, 06 Feb 2026 14:09:15 +0000 (UTC)

X-Priority: 5

X-Mailer: juybxrdfrht zbylbcqdg vstphtpluoyg 564.81068

Mime-Version: 1.0

X-SG-EID:

=?us-ascii?Q?u001=2EOWhKS4YezuG0HicfR37AGN04y0ypBjSy72As5qZqelRbOafXV8vygAbVe?=

=?us-ascii?Q?jhjNrVp8+Ltce7SGIc=2FvfCGv0gMiOZKIMJWquCj?=

=?us-ascii?Q?VZvE2w1QL6stQgmB91KbyT+RnueHFat=2F83pDK7r?=

=?us-ascii?Q?fh89W3pdduSTTIq7ydTUVEHE+PbfETLfCd=2FZP1c?=

=?us-ascii?Q?XGbe5lLLZWaGs+R1kHFOvv+aObIqJiyIOvJHvt0?=

=?us-ascii?Q?CHILb5zbcp0pV2IW+5BLbA=3D?=

To: root

X-Entity-ID: u001.JFEV++DhVprx2m2mQjpDlw==

Content-Type: multipart/alternative;

boundary="35779f435b8af04443066e31000ddee1"

X-Spam_score: 52.6

X-Spam_score_int: 526

X-Spam_bar: +++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Compliance Update – Expired W-8BEN Requires Immediate RenewalDear

Client,This communication serves as a formal compliance update regarding

the tax documentation on file for your account. Our records [...]



Content analysis details: (52.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

[149.72.70.15 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

[149.72.70.15 listed in dnsbl.ahbl.org]

[149.72.70.15 listed in dnsbl.ahbl.org]

[149.72.70.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[149.72.70.15 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.5 FROM_DOMAIN_NOVOWEL From: domain has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.7 SARE_XMAIL_SUSP2 X-Mailer suggests spam (variant 2)

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: ctnptwpr.xyz (xyz)]

0.6 J_CHICKENPOX_27 BODY: 2alpha-pock-7alpha

0.6 J_CHICKENPOX_64 BODY: 6alpha-pock-4alpha

0.6 J_CHICKENPOX_32 BODY: 3alpha-pock-2alpha

0.6 J_CHICKENPOX_44 BODY: 4alpha-pock-4alpha

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.8 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

2.5 XM_RANDOM X-Mailer apparently random

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} Tax Documentation Notice =?UTF-8?B?4oCT?= W-8BEN Has Expired and

Requires Renewal



TD TD Direct Investing Logo

Compliance Update – Expired W-8BEN Requires Immediate Renewal



Dear Client,



This communication serves as a formal compliance update regarding the tax documentation on file for your account. Our records confirm that the W-8BEN form previously submitted has expired and is no longer valid for withholding or reporting purposes. The W-8BEN is a mandatory document used to establish foreign tax status and determine appropriate tax treatment.



Once a W-8BEN expires, it cannot be used to support preferential withholding rates or tax treaty benefits. In the absence of a valid form, applicable regulations may require default withholding measures to be applied to your account until updated documentation is received and approved.



To restore compliant tax documentation, you are required to submit a renewed W-8BEN. The renewal process is completed through our secure online system and must be submitted for review before compliant tax treatment can resume.



Please access the secure system using the link below:



Complete Update



Login with the email address you used to register to complete your application today, or access your application using your WebBroker Username/Connect ID and password, or your EasyWeb Username/Access Card and password.

Questions? We're Ready to Help!



Call 1‑800‑465‑5463 to speak to a licensed Investment Representative from Monday to Friday, 7:00 a.m. to 10:00 p.m. EST (one-hour extension).



Thank you,



TD Direct Investing

Contact Us | Privacy & Security | Legal



TD Direct Investing is a division of TD Waterhouse Canada Inc., a subsidiary of The Toronto‑Dominion Bank.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 07:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voMXD-00000000KHj-3iT3

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 07:10:11 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 07:10:11 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from region.emg.fm ([109.235.208.74]:50392)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voM2u-00000000Fdi-0Ivw

for doctor@nk.ca;

Fri, 06 Feb 2026 06:39:00 -0700

Received: from region.emg.fm (region.emg.fm [127.0.0.1])

by region.emg.fm (Postfix) with ESMTP id 4f6wBT2sQQz7bjsl

for ; Fri, 6 Feb 2026 16:37:37 +0300 (MSK)

Authentication-Results: region.emg.fm (amavis); dkim=pass

reason="pass (just generated, assumed good)" header.d=region.emg.fm

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=region.emg.fm; h=

content-transfer-encoding:content-type:message-id:user-agent

:subject:to:from:date:mime-version; s=dkim; t=1770385056; x=

1772977057; bh=FI835rPG3TA/7YvKDmucTGi80C95DRQ5B9OretpWOqk=; b=M

8+fOwgvuCFewUb+e1XZzNFUqL7Z4OOYmANE7x5rD8N4wPd9eEbiuZUwhN1OEK3dP

/O2czRL19t6uS4Q9y5H2rrBPSX9atPEyjug109QHG+Gr1azZTd75KZTB1/pappBf

lo1fFZ6Kb6q23AncngY9AyU0XU8I1VLhhTtxR0H8RaGjwYDdQcCAxUlMm4EIF0mg

PnXzVakcqHVLvV7PBWREjJRfj0cYWu4GumxqIG8zXxxKMCX7qy4aJbaRW1ed/LWR

Kvj4WraJAKceMTo848jbwE5RE2kA2dHj7k7O83fB66S5RkF0f/eV08tyBTCmIoSO

Br8/eiF6Onqi6yXlYoAVA==

X-Virus-Scanned: amavis at region.emg.fm

X-Spam-Flag: NO

X-Spam-Score: 4.318

X-Spam-Level: ****

X-Spam-Status: No, score=4.318 tagged_above=2 required=6.2

tests=[ALL_TRUSTED=-1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1,

LOTS_OF_MONEY=0.001, MILLION_HUNDRED=0.001, MONEY_FORM_SHORT=0.001,

MONEY_NOHTML=2.499, T_FILL_THIS_FORM_SHORT=0.01, UNDISC_MONEY=1.805]

autolearn=no autolearn_force=no

Received: from region.emg.fm ([127.0.0.1])

by region.emg.fm (region.emg.fm [127.0.0.1]) (amavis, port 10026) with ESMTP

id 6t8FivZHuEcL for ; Fri, 6 Feb 2026 16:37:36 +0300 (MSK)

Received: from localhost (region.emg.fm [127.0.0.1])

by region.emg.fm (Postfix) with ESMTPSA id 4f6wBH6gNpz7bcjL;

Fri, 6 Feb 2026 16:37:27 +0300 (MSK)

MIME-Version: 1.0

Date: Fri, 06 Feb 2026 05:37:27 -0800

From: Financial Crimes Enforcement

To: undisclosed-recipients:;

Subject: Greetings

User-Agent: Roundcube Webmail

Message-ID:

X-Sender: ust-fincen.us@outlook.com

Content-Type: text/plain; charset=US-ASCII;

format=flowed

Content-Transfer-Encoding: 7bit

X-Spam_score: 16.3

X-Spam_score_int: 163

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Financial Crimes Enforcement Network (FinCEN) P.O. Box 39

Vienna, Virginia, 22183 Date:6/02/2026 Greetings, We hope this finds you well.

Your pending transaction, intercepted by FinCEN, has been fully reviewed

and approved for release.



Content analysis details: (16.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

[109.235.208.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.235.208.74 listed in dnsbl.ahbl.org]

[109.235.208.74 listed in dnsbl.ahbl.org]

[109.235.208.74 listed in dnsbl.ahbl.org]

[109.235.208.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.235.208.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.235.208.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.235.208.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.235.208.74 listed in dnsbl.ahbl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ust-fincen.us(at)outlook.com]

2.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

1.0 SPOOFED_FREEMAIL No description available.

Subject: {SPAM?} Greetings



Financial Crimes Enforcement Network (FinCEN)

P.O. Box 39

Vienna, Virginia, 22183



Date:6/02/2026



Greetings,

We hope this finds you well. Your pending transaction, intercepted by

FinCEN, has been fully reviewed and approved for release.



The sum of Ten Million Five Hundred Thousand Dollars has been confirmed

legitimate and will be paid via Online Banking Payment, accessible from

your location.



To issue your Payment Release Certificate and complete the transfer,

please provide:

Full Name

Address

Contact Number

Government-issued ID (scan copy)



Send the above to gacki.andrea@yahoo.com, After verification, we will

issue your certificate and provide instructions to access your funds.



Thank you for your cooperation.

Sincerely,

Andrea Gacki

Director Financial Crimes Enforcement Network (FinCEN)

ZS1oZWlnaHQ6MS41Ij48ZW0+PGZvbnQgZmFjZT0iQ2FsaWJyaSI+PGZvbnQgc3R5bGU9ImZvbnQt

c2l6ZTogMTVweDsiPlNvcGhpYSBaZW5nPC9mb250PjwvZm9udD48L2VtPjwvc3Ryb25nPjwvc3Bh

bj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFu

Pjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+

PC9zcGFuPjwvZGl2PgoKPGRpdiBzdHlsZT0idGV4dC1hbGlnbjpzdGFydDsgLXdlYmtpdC10ZXh0

LXN0cm9rZS13aWR0aDowcHgiPgo8ZGl2PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTRweCI+PHNw

YW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtN

aWNyb3NvZnQgWWFIZWkgVUkmcXVvdDsiPjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbCI+

PHNwYW4gc3R5bGU9ImZvbnQtdmFyaWFudC1saWdhdHVyZXM6bm9ybWFsIj48c3BhbiBzdHlsZT0i

Zm9udC12YXJpYW50LWNhcHM6bm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6NDAwIj48

c3BhbiBzdHlsZT0ibGV0dGVyLXNwYWNpbmc6bm9ybWFsIj48c3BhbiBzdHlsZT0ib3JwaGFuczoy

Ij48c3BhbiBzdHlsZT0idGV4dC10cmFuc2Zvcm06bm9uZSI+PHNwYW4gc3R5bGU9IndoaXRlLXNw

YWNlOm5vcm1hbCI+PHNwYW4gc3R5bGU9IndpZG93czoyIj48c3BhbiBzdHlsZT0id29yZC1zcGFj

aW5nOjBweCI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZiI+PHNwYW4gc3R5

bGU9InRleHQtZGVjb3JhdGlvbi10aGlja25lc3M6aW5pdGlhbCI+PHNwYW4gc3R5bGU9InRleHQt

ZGVjb3JhdGlvbi1zdHlsZTppbml0aWFsIj48c3BhbiBzdHlsZT0idGV4dC1kZWNvcmF0aW9uLWNv

bG9yOmluaXRpYWwiPjxzcGFuIHN0eWxlPSJsaW5lLWhlaWdodDpub3JtYWwiPjxzcGFuIHN0eWxl

PSJwb3NpdGlvbjpzdGF0aWMgIWltcG9ydGFudCI+PGZvbnQgZmFjZT0iQ2FsaWJyaSI+PGZvbnQg

c3R5bGU9ImZvbnQtc2l6ZTogMTVweDsiPlNhbGVzIE1hbmFnZXI8L2ZvbnQ+PC9mb250Pjwvc3Bh

bj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFu

Pjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+

PC9zcGFuPjwvc3Bhbj48L2Rpdj4KCjxkaXY+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxNHB4Ij48

c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90

O01pY3Jvc29mdCBZYUhlaSBVSSZxdW90OyI+PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFs

Ij48c3BhbiBzdHlsZT0iZm9udC12YXJpYW50LWxpZ2F0dXJlczpub3JtYWwiPjxzcGFuIHN0eWxl

PSJmb250LXZhcmlhbnQtY2Fwczpub3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDo0MDAi

PjxzcGFuIHN0eWxlPSJsZXR0ZXItc3BhY2luZzpub3JtYWwiPjxzcGFuIHN0eWxlPSJvcnBoYW5z

OjIiPjxzcGFuIHN0eWxlPSJ0ZXh0LXRyYW5zZm9ybTpub25lIj48c3BhbiBzdHlsZT0id2hpdGUt

c3BhY2U6bm9ybWFsIj48c3BhbiBzdHlsZT0id2lkb3dzOjIiPjxzcGFuIHN0eWxlPSJ3b3JkLXNw

YWNpbmc6MHB4Ij48c3BhbiBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjojZmZmZmZmIj48c3BhbiBz

dHlsZT0idGV4dC1kZWNvcmF0aW9uLXRoaWNrbmVzczppbml0aWFsIj48c3BhbiBzdHlsZT0idGV4

dC1kZWNvcmF0aW9uLXN0eWxlOmluaXRpYWwiPjxzcGFuIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb24t

Y29sb3I6aW5pdGlhbCI+PHNwYW4gc3R5bGU9ImxpbmUtaGVpZ2h0Om5vcm1hbCI+PHNwYW4gc3R5

bGU9InBvc2l0aW9uOnN0YXRpYyAhaW1wb3J0YW50Ij48Zm9udCBmYWNlPSJDYWxpYnJpIj48Zm9u

dCBzdHlsZT0iZm9udC1zaXplOiAxNXB4OyI+PHNwYW4gc3R5bGU9ImxpbmUtaGVpZ2h0OjIzLjc5

NjlweCI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6d2luZG93Ij48c3Ryb25nPlRIUkVF

V0FZIFNURUVMIENPLixMVEQ8L3N0cm9uZz48L3NwYW4+PC9zcGFuPiZuYnNwOyZuYnNwOzwvZm9u

dD48L2ZvbnQ+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFu

Pjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+

PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvZGl2PgoKPGRpdj4KPGRpdj48c3BhbiBzdHls

ZT0iZm9udC1zaXplOjE0cHgiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3BhbiBzdHls

ZT0iZm9udC1mYW1pbHk6JnF1b3Q7TWljcm9zb2Z0IFlhSGVpIFVJJnF1b3Q7Ij48c3BhbiBzdHls

ZT0iZm9udC1zdHlsZTpub3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXZhcmlhbnQtbGlnYXR1cmVz

Om5vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtdmFyaWFudC1jYXBzOm5vcm1hbCI+PHNwYW4gc3R5

bGU9ImZvbnQtd2VpZ2h0OjQwMCI+PHNwYW4gc3R5bGU9ImxldHRlci1zcGFjaW5nOm5vcm1hbCI+

PHNwYW4gc3R5bGU9Im9ycGhhbnM6MiI+PHNwYW4gc3R5bGU9InRleHQtdHJhbnNmb3JtOm5vbmUi

PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpub3JtYWwiPjxzcGFuIHN0eWxlPSJ3aWRvd3M6MiI+

PHNwYW4gc3R5bGU9IndvcmQtc3BhY2luZzowcHgiPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNv

bG9yOiNmZmZmZmYiPjxzcGFuIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb24tdGhpY2tuZXNzOmluaXRp

YWwiPjxzcGFuIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb24tc3R5bGU6aW5pdGlhbCI+PHNwYW4gc3R5

bGU9InRleHQtZGVjb3JhdGlvbi1jb2xvcjppbml0aWFsIj48c3BhbiBzdHlsZT0ibGluZS1oZWln

aHQ6bm9ybWFsIj48c3BhbiBzdHlsZT0icG9zaXRpb246c3RhdGljICFpbXBvcnRhbnQiPjxzcGFu

IHN0eWxlPSJsaW5lLWhlaWdodDoyMHB4Ij48c3BhbiBzdHlsZT0iZm9udC1zdHJldGNoOm5vcm1h

bCI+PHNwYW4gc3R5bGU9ImxpbmUtaGVpZ2h0OjE0LjI1cHQiPjxmb250IGZhY2U9IkNhbGlicmki

Pjxmb250IHN0eWxlPSJmb250LXNpemU6IDE1cHg7Ij48Zm9udCBzdHlsZT0ibGluZS1oZWlnaHQ6

MS42Ij48c3BhbiBzdHlsZT0ibGluZS1oZWlnaHQ6MjAuOHB4Ij5XaGF0c2FwcDwvc3Bhbj48L2Zv

bnQ+PGZvbnQgc3R5bGU9ImxpbmUtaGVpZ2h0OjEuNiI+PHNwYW4gc3R5bGU9ImxpbmUtaGVpZ2h0

OjIwLjhweCI+OiA4Ni0xMzU0NDAzNjUzNjwvc3Bhbj48L2ZvbnQ+PGZvbnQgc3R5bGU9ImxpbmUt

aGVpZ2h0OjEuNiI+Jm5ic3A7PC9mb250Pjxmb250IHN0eWxlPSJsaW5lLWhlaWdodDoxLjYiPnwg

Jm5ic3A7V2VjaGF0OiZuYnNwOzwvZm9udD48c3BhbiBzdHlsZT0ibGluZS1oZWlnaHQ6MjAuOHB4

Ij44Ni0xMzU0NDAzNjUzNjwvc3Bhbj48L2ZvbnQ+PC9mb250Pjwvc3Bhbj48YnIgLz4KPHNwYW4g

c3R5bGU9ImxpbmUtaGVpZ2h0OjE0LjI1cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTVweCI+

PHNwYW4gc3R5bGU9ImxpbmUtaGVpZ2h0OjIwLjhweCI+PGZvbnQgZmFjZT0iQ2FsaWJyaSI+QWRk

OiBIdW5hbiBTdGVlbCBJbmR1c3RyaWFsIFpvbmUsIFRpYW54aW4gU3BlY2lhbCBEaXN0cmljdCxD

aGFuZ3NoYSBDaXR5LENoaW5hPC9mb250Pjwvc3Bhbj48L3NwYW4+PC9zcGFuPjxiciAvPgo8c3Bh

biBzdHlsZT0ibGluZS1oZWlnaHQ6MTQuMjVwdCI+PGZvbnQgZmFjZT0iQ2FsaWJyaSI+PGZvbnQg

c3R5bGU9ImZvbnQtc2l6ZTogMTVweDsiPjxmb250IHN0eWxlPSJsaW5lLWhlaWdodDoxLjYiPldl

YnNpdGU6Jm5ic3A7PC9mb250Pjxmb250IHN0eWxlPSJsaW5lLWhlaWdodDoxLjYiPnd3dy5zcnRz

dGVlbHBpcGUuY29tJm5ic3A7Jm5ic3A7PC9mb250Pjxmb250IHN0eWxlPSJsaW5lLWhlaWdodDox

LjYiPnwgJm5ic3A7PC9mb250PjxzcGFuIHN0eWxlPSJsaW5lLWhlaWdodDoyMHB4Ij53d3cudGhy

ZWV3YXlzdGVlbC5jb208L3NwYW4+PGZvbnQgc3R5bGU9ImxpbmUtaGVpZ2h0OjEuNiI+Jm5ic3A7

Jm5ic3A7PC9mb250Pjxmb250IHN0eWxlPSJsaW5lLWhlaWdodDoxLjYiPnwmbmJzcDsmbmJzcDs8

L2ZvbnQ+PC9mb250PjwvZm9udD48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwv

c3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9z

cGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3Nw

YW4+PGJyIC8+CjxpbWcgYWx0PSIiIHNyYz0iaHR0cHM6Ly9jb3VudC50aHJlZXdheS1waXBlLmNv

bS90ZW1wbGF0ZS9hamF4X2dldF9uZXR3b3JrX2F0dGFjaC8/aWQ9MTYzNzk3MSZhbXA7dWZpbGVf

bmFtZT0wNGQzMjQ4Ni1mMWIyLTExZjAtOGEwZS0wMDUwNTY5NjdjMzEtOTA3MDkucG5nJmFtcDth

aWQ9MSIgc3R5bGU9IndpZHRoOiA0NjVweDsgaGVpZ2h0OiAxNzZweDsiIC8+PC9kaXY+CjwvZGl2

Pgo8L2Rpdj4KPC9kaXY+PGltZyBzcmM9Imh0dHBzOi8vY291bnQudGhyZWV3YXktcGlwZS5jb20v

bmV3X3RyYWNrL3Q0L056YzNOakUwT0h4OE1qQXlOakF5TURZeE56UXhORGN0TVRNME5UTXROVFY4

ZkhKdmIzUkFibXN1WTJFPS5naWYiIGJvcmRlcj0iMCIgd2lkdGg9IjEiIGhlaWdodD0iMSIgc3R5

bGU9ImRpc3BsYXk6bm9uZSIgLz48L2h0bWw+



--===============6940587271516861095==--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 07:10:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voMWJ-00000000Hr5-0Xgu

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 07:09:15 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 07:09:14 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta43-3.mmglsmd.net ([103.37.43.3]:55477)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voIeK-000000006dN-1zta

for root@nk.ca;

Fri, 06 Feb 2026 03:01:25 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.threeway-pipe.com; i=@hn.threeway-pipe.com;

q=dns/txt; s=umail; t=1770372026; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=Yhet5da4EvLttTYwZrgU9EPirwaIiawkJhegPTfb0K4=;

b=pK7kilt7VmuH1E3GQ6BEgguCJL/MuycZu1yp0djdM5mvWuQUc1v3syUp

MI8dVvSODKPa96S9bp5bINF4bZ2eggap5MBnlPMh5OhoR3uAo5p5pY3nkv

QzEQ1wmOvAVgTSnYFSfCIGRTJkqg22leqMYe1HkUSllKEpidFPBvC62Bo=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.threeway-pipe.com (Postfix) with ESMTP id pRcXePbzaTny

for ; Fri, 06 Feb 2026 18:00:26 +0800

Content-Type: multipart/mixed; boundary="===============6940587271516861095=="

MIME-Version: 1.0

Message-Id: <20260206180026.81772-{13453:20260206174147-13453-55}-0099839@hn.threeway-pipe.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?q?Re=3A_LSAW/_ERW_/_SSAW_/SMLS_steel_pipe_with_32years_--Threeway?=

=?utf-8?q?steel?=

From: Sophia-Threewaysteel

To: "www.nk.ca"

Date: Fri, 06 Feb 2026 18:00:26 +0800

Mail-ID: 6985b7aae1382308d01bb4bb

X-Spam_score: 15.1

X-Spam_score_int: 151

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Procurement Manager, Good morning!



Content analysis details: (15.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.37.43.3 listed in will-spam-for-food.eu.org]

[103.37.43.3 listed in will-spam-for-food.eu.org]

[103.37.43.3 listed in will-spam-for-food.eu.org]

[103.37.43.3 listed in will-spam-for-food.eu.org]

[103.37.43.3 listed in will-spam-for-food.eu.org]

[103.37.43.3 listed in will-spam-for-food.eu.org]

[103.37.43.3 listed in will-spam-for-food.eu.org]

[103.37.43.3 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.37.43.3 listed in dnsbl.ahbl.org]

[103.37.43.3 listed in dnsbl.ahbl.org]

[103.37.43.3 listed in dnsbl.ahbl.org]

[103.37.43.3 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.37.43.3 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.37.43.3 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.37.43.3 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.37.43.3 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: threeway-pipe.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: count.threeway-pipe.com]

[URI: hn.threeway-pipe.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: ns4.dnsv2.com/112.80.181.155]

[URI: ns17.xincache.com/112.80.181.45]

[URI: ns18.xincache.com/112.80.181.111]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Re=3A_LSAW/_ERW_/_SSAW_/SMLS_steel_pipe_with_32years_--Threeway?=

=?utf-8?q?steel?=

--===============6940587271516861095==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PGh0bWw+PGRpdj4KPGRpdiBzdHlsZT0idGV4dC1hbGlnbjpzdGFydDsgLXdlYmtpdC10ZXh0LXN0

cm9rZS13aWR0aDowcHgiPgo8ZGl2IHN0eWxlPSJ0ZXh0LWFsaWduOnN0YXJ0OyAtd2Via2l0LXRl

eHQtc3Ryb2tlLXdpZHRoOjBweCI+CjxkaXYgY2xhc3M9InlpdjgzOTg2NDI2NTEiIHN0eWxlPSJ0

ZXh0LWFsaWduOnN0YXJ0OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOjBweDsgbWFyZ2luOjBp

biAwaW4gMHB0Ij4KPGRpdiBzdHlsZT0idGV4dC1hbGlnbjpzdGFydDsgLXdlYmtpdC10ZXh0LXN0

cm9rZS13aWR0aDowcHgiPgo8ZGl2PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTRweCI+PHNwYW4g

c3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtNaWNy

b3NvZnQgWWFIZWkgVUkmcXVvdDsiPjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbCI+PHNw

YW4gc3R5bGU9ImZvbnQtdmFyaWFudC1saWdhdHVyZXM6bm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u

dC12YXJpYW50LWNhcHM6bm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6NDAwIj48c3Bh

biBzdHlsZT0ibGV0dGVyLXNwYWNpbmc6bm9ybWFsIj48c3BhbiBzdHlsZT0ib3JwaGFuczoyIj48

c3BhbiBzdHlsZT0idGV4dC10cmFuc2Zvcm06bm9uZSI+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNl

Om5vcm1hbCI+PHNwYW4gc3R5bGU9IndpZG93czoyIj48c3BhbiBzdHlsZT0id29yZC1zcGFjaW5n

OjBweCI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZiI+PHNwYW4gc3R5bGU9

InRleHQtZGVjb3JhdGlvbi10aGlja25lc3M6aW5pdGlhbCI+PHNwYW4gc3R5bGU9InRleHQtZGVj

b3JhdGlvbi1zdHlsZTppbml0aWFsIj48c3BhbiBzdHlsZT0idGV4dC1kZWNvcmF0aW9uLWNvbG9y

OmluaXRpYWwiPjxmb250IGZhY2U9IuW+rui9r+mbhem7kSI+RGVhciBQcm9jdXJlbWVudCBNYW5h

Z2VyLDxiciAvPgo8YnIgLz4KR29vZCBtb3JuaW5nITxiciAvPgo8YnIgLz4KR3JlZXRpbmdzIGZy

b20gVGhyZWV3YXkgU3RlZWwhIFdpdGggMzMgeWVhcnMgb2YgZXhwZXJpZW5jZSBhcyBhIHByb2Zl

c3Npb25hbCBtYW51ZmFjdHVyZXIsIHdlIHNwZWNpYWxpemUgaW4gcHJvZHVjaW5nIGhpZ2gtcXVh

bGl0eSBzZWFtbGVzcyBwaXBlcyBhbmQgcGlwZSBmaXR0aW5ncyAoZWxib3dzLCBmbGFuZ2VzLCB0

ZWVzLCByZWR1Y2VycywgZXRjLikuIFdlIGFyZSBrZWVuIHRvIHBhcnRuZXIgd2l0aCBlc3RhYmxp

c2hlZCBjb21wYW5pZXMgbGlrZSB5b3VycyB0byBzdXBwb3J0IHRoZSBncm93aW5nIGluZHVzdHJp

YWwgYW5kIGluZnJhc3RydWN0dXJlIGRldmVsb3BtZW50IGFjcm9zcyBTb3V0aCBBbWVyaWNhLjxi

ciAvPgo8YnIgLz4KV2UgaGF2ZSBhbiBleHRlbnNpdmUgdHJhY2sgcmVjb3JkIG9mIHN1cHBseWlu

ZyB0byBtYWpvciBnbG9iYWwgcHJvamVjdHMgYW5kIGNvbXBhbmllcywgaW5jbHVkaW5nIEFETk9D

LCBTSEVMTCwgUGV0cm9uYXMsIGFuZCBUYW4gU29uIE5oYXQgSW50ZXJuYXRpb25hbCBBaXJwb3J0

LCBjb25zaXN0ZW50bHkgbWVldGluZyBzdHJpbmdlbnQgcXVhbGl0eSBhbmQgZGVsaXZlcnkgc3Rh

bmRhcmRzLjxiciAvPgo8YnIgLz4KT3VyIGtleSBzdHJlbmd0aHMgaW5jbHVkZTo8YnIgLz4KPGJy

IC8+CkNlcnRpZmljYXRpb25zICZhbXA7IFN0YW5kYXJkczogQVBJIDVMLCBBU1RNIEExMDYvQTUz

LCBESU4gMjQ0OC9FTiAxMDIxNiwgSklTIEczNDU0LCBJU08gOTAwMTxiciAvPgombmJzcDtNYXRl

cmlhbHMgUmFuZ2U6IENhcmJvbiBzdGVlbCAoQTEwNiBHci5CLCBBUEkgNUwgWDQyL1g1MiksIGFs

bG95IHN0ZWVsIChBMzM1IFAxMS9QMjIpLCBzdGFpbmxlc3Mgc3RlZWwgKDMwNC8zMTYvMzE2TCks

IGFuZCBtb3JlPGJyIC8+ClF1YWxpdHkgQXNzdXJhbmNlOiBSaWdvcm91cyB0ZXN0aW5nIChub24t

ZGVzdHJ1Y3RpdmUsIHByZXNzdXJlIHRlc3RzKSBlbnN1cmluZyByZWxpYWJsZSBwZXJmb3JtYW5j

ZSBhbmQgZHVyYWJpbGl0eTxiciAvPgombmJzcDtDb21wZXRpdGl2ZSBQcmljaW5nOiBDb3N0LWVm

ZmVjdGl2ZSBzb2x1dGlvbnMgd2l0aG91dCBjb21wcm9taXNpbmcgcXVhbGl0eTxiciAvPgombmJz

cDtSZWxpYWJsZSBTZXJ2aWNlOiBPbi10aW1lIGRlbGl2ZXJ5LCBkZWRpY2F0ZWQgdGVjaG5pY2Fs

IHN1cHBvcnQsIGFuZCBsb2NhbCBleHBlcmllbmNlIGluIGludGVybmF0aW9uYWwgbWFya2V0czxi

ciAvPgo8YnIgLz4KV2Ugd291bGQgYmUgcGxlYXNlZCB0byBzaGFyZSBkZXRhaWxlZCBjYXRhbG9n

cywgc3BlY2lmaWNhdGlvbnMsIGFuZCBhIGN1c3RvbWl6ZWQgcXVvdGF0aW9uIGJhc2VkIG9uIHlv

dXIgbmVlZHMuIFdoZXRoZXIgZm9yIHJlZ3VsYXIgc3VwcGx5IG9yIGxhcmdlLXNjYWxlIHByb2pl

Y3RzLCB3ZSBhcmUgY29tbWl0dGVkIHRvIHByb3ZpZGluZyBkZXBlbmRhYmxlIGFuZCBlZmZpY2ll

bnQgc29sdXRpb25zLjxiciAvPgo8YnIgLz4KV291bGQgeW91IGJlIGludGVyZXN0ZWQgaW4gZGlz

Y3Vzc2luZyB5b3VyIGN1cnJlbnQgcmVxdWlyZW1lbnRzIG9yIHNjaGVkdWxpbmcgYSBicmllZiB2

aXJ0dWFsIG1lZXRpbmcgYXQgeW91ciBjb252ZW5pZW5jZT88YnIgLz4KPGJyIC8+Ckxvb2tpbmcg

Zm9yd2FyZCB0byB5b3VyIHJlc3BvbnNlLjxiciAvPgo8YnIgLz4KQmVzdCByZWdhcmRzLDwvZm9u

dD48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFu

Pjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+

PC9zcGFuPjwvZGl2Pgo8L2Rpdj4KPGltZyBhbHQ9IiIgc3JjPSJodHRwczovL2NvdW50LnRocmVl

d2F5LXBpcGUuY29tL3RlbXBsYXRlL2FqYXhfZ2V0X25ldHdvcmtfYXR0YWNoLz9pZD0xNjM3OTcx

JmFtcDt1ZmlsZV9uYW1lPTIyN2FiYTNhLWYxYjItMTFmMC05MjQ4LTAwNTA1Njk2N2MzMS01Mzc4

MS5qcGcmYW1wO2FpZD0xIiBzdHlsZT0id2lkdGg6IDUwMHB4OyBoZWlnaHQ6IDM2NHB4OyIgLz48

aW1nIGFsdD0iIiBzcmM9Imh0dHBzOi8vY291bnQudGhyZWV3YXktcGlwZS5jb20vdGVtcGxhdGUv

YWpheF9nZXRfbmV0d29ya19hdHRhY2gvP2lkPTE2NjE3MjMmYW1wO3VmaWxlX25hbWU9NjNkNDU2

NGEtMDBkNC0xMWYxLTk0MDAtMDA1MDU2OTY3YzMxLTIyMTIwLmpwZWcmYW1wO2FpZD0xIiBzdHls

ZT0id2lkdGg6IDUwMHB4OyBoZWlnaHQ6IDM3NXB4OyIgLz48aW1nIGFsdD0iIiBzcmM9Imh0dHBz

Oi8vY291bnQudGhyZWV3YXktcGlwZS5jb20vdGVtcGxhdGUvYWpheF9nZXRfbmV0d29ya19hdHRh

Y2gvP2lkPTE2NjE3MjMmYW1wO3VmaWxlX25hbWU9NzQ0MGVhYjYtMDBkNC0xMWYxLTg2ZDEtMDA1

MDU2OTY3YzMxLTgwNjc5LmpwZWcmYW1wO2FpZD0xIiBzdHlsZT0id2lkdGg6IDUwMHB4OyBoZWln

aHQ6IDUwMHB4OyIgLz48aW1nIGFsdD0iIiBzcmM9Imh0dHBzOi8vY291bnQudGhyZWV3YXktcGlw

ZS5jb20vdGVtcGxhdGUvYWpheF9nZXRfbmV0d29ya19hdHRhY2gvP2lkPTE2NjE3MjMmYW1wO3Vm

aWxlX25hbWU9OTQxNjJmYjgtMDBkNC0xMWYxLTk0NTYtMDA1MDU2OTY3YzMxLTU1MDU5LnBuZyZh

bXA7YWlkPTEiIHN0eWxlPSJ3aWR0aDogNTAwcHg7IGhlaWdodDogNTAwcHg7IiAvPjwvZGl2Pgo8

L2Rpdj4KPC9kaXY+CjwvZGl2PgoKPGRpdj4mbmJzcDs8L2Rpdj4KCjxkaXY+CjxkaXYgc3R5bGU9

InRleHQtYWxpZ246c3RhcnQ7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6MHB4Ij48c3BhbiBz

dHlsZT0iZm9udC1zaXplOjE0cHgiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3BhbiBz

dHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7TWljcm9zb2Z0IFlhSGVpIFVJJnF1b3Q7Ij48c3BhbiBz

dHlsZT0iZm9udC1zdHlsZTpub3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXZhcmlhbnQtbGlnYXR1

cmVzOm5vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtdmFyaWFudC1jYXBzOm5vcm1hbCI+PHNwYW4g

c3R5bGU9ImZvbnQtd2VpZ2h0OjQwMCI+PHNwYW4gc3R5bGU9ImxldHRlci1zcGFjaW5nOm5vcm1h

bCI+PHNwYW4gc3R5bGU9Im9ycGhhbnM6MiI+PHNwYW4gc3R5bGU9InRleHQtdHJhbnNmb3JtOm5v

bmUiPjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpub3JtYWwiPjxzcGFuIHN0eWxlPSJ3aWRvd3M6

MiI+PHNwYW4gc3R5bGU9IndvcmQtc3BhY2luZzowcHgiPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5k

LWNvbG9yOiNmZmZmZmYiPjxzcGFuIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb24tdGhpY2tuZXNzOmlu

--000000000000aa9877064a243239

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



FACEBOOK INC

1601 WILLOW ROAD MENLO PARK, CA 94025

www.facebook.com



Dear Facebook User:



As part of Facebook Corporate social responsibility and customer loyalty

bonus for the Year 2026.



Your Facebook account has Qualified you to receive the sum of 550,000Euro.

(ATM Prepaid Debit Card) and your Facebook account has been marked for

official Verification.



To confirm your claim, You are requested to Verify the following details of

yours to Facebook Verification Management.



Full Names:

Country:

Gender:

Age:

Occupation:

Email:

Phone Number: +

Home Address:



NOTE: Facebook Management already has most or all of these details but

need to be 100% sure that this Facebook account belongs to you.



Congratulations and we look forward to hearing from you soon.



Office of the President

CEO of Facebook

Mr Mark Zuckerberg

Facebook =C2=A9 2026



--000000000000aa9877064a243239

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 07:09:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voMW3-00000000HJm-1onQ

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 07:08:59 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 07:08:59 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f42.google.com ([209.85.167.42]:45443)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voHud-000000004S7-2weK

for doctor@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 02:14:11 -0700

Received: by mail-lf1-f42.google.com with SMTP id 2adb3069b0e04-59de8155501so2206937e87.3

for ; Fri, 06 Feb 2026 01:13:16 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1770369190; cv=none;

d=google.com; s=arc-20240605;

b=RIdJYWOlmrfYUtFfut3t+rD5x+et3vbBtHnpHADFBEkT0Xfjtm/NGO9uurKcZQZIeB

3BzB1CEwhFzrvutR8UhP2jgaBmusyhOqnqpNKKWvzbOaTsNYWg6pJFyv7Vyqranlexjk

wuZWBQ+wbQeitxQbwRtDpa3xomhZqCRNqGgHTt+CMFBjT+VJcHo+VuNMCo7FIv3Nu85/

EO1xoDUW2Z22xyulhVTVP4cqdVbrxaxk+WUXQ5Y27f/XiDlKexu1I7sd8TNwKpTOLX9s

hh6X3vBtbQtiYWcDVTaBupyTmqgLBej/SBFgEFGKcv6xpnaQyIs3Spi6/98FP72V00c1

lzgQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=R29MztCbRFPKkpztOpXHakuuN6Mstk/2/JFLvcYGLtE=;

fh=D9p238s7yLvRBgm1ZZ/lWtPo21odYgKZQzrbmVtXjAU=;

b=IjVtBMS57W0gin9r1IvsMUHYHlw3qmy/vYneRkN/79/4lagVgT3lF+1jUy02JNAtV+

u7H28QFQRGYaVeGHG3Lf/jMgxAwWkD/XpfP5rC9hbZPTFolX+1iJfM6VvVpq+XDTanvU

4qPL9CucyWVJzvW1WKNg7dkIz3fgx+BmORlowKx3VozhBCij2SV+6iOtvB/+ax3C51r+

9FLIH+z8P8XbIiy+Ok98RxII99UBG9dnqBkdPXLFNEgqRBbl6eDyISwTui6c0kW7yXOf

+Fg+aaJKUs9u0kWw+yVJfS6VrYReRdX3OHZbqMY7Ooscpg4p2ircB6L+m4mnDSc6jHkI

Q4QA==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cgcc.edu; s=google; t=1770369190; x=1770973990; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=R29MztCbRFPKkpztOpXHakuuN6Mstk/2/JFLvcYGLtE=;

b=AnEnn34k+WYBIat0V0eV3cwJVHd4cdvfRnM6RB6DDUVOWvCHeeEABng6MOSme/LxSX

5AbafemRdaR+qhZ/Du2m3n35WrOeqBcrr/wd9t+0ofA1k7Od3gWAmwJHcBZDGe0Mfiub

sQLNgv2VDRDZR4po497O8KbF1qw2RK9zEbDxCkWjj0ektyrGEBD+ZMm/vKsNXfwRTh7c

+OFLqP25qXX0HWdyukIlDEw4ZE0fnUQYMU75Fnn4HUXZPyNC4ErsLfwMEWQUraxHZ7tO

MdrK40Wv23+T+Xfbd8xM7DznkIq54asesLUVicPt4BYIYWcKiQkXeTjalXwXjoSL03gr

K/2Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770369190; x=1770973990;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=R29MztCbRFPKkpztOpXHakuuN6Mstk/2/JFLvcYGLtE=;

b=APgdLCvASf/kbPd2roliGAq4990gxbNCjvEFyAWS/diOqz+TVqFOAYZxUJWVePjGMk

9mVpQB69TUlfIhf2YAtMf+hdEYuy4YeYMs8d5xtNyU+gqR9icn7twYZuoDZVlr+RNI26

yWQUGCDdDdl9wmT5cmsOF4YdAHQX8dr/MGmRRI5FBf/a6zVzsKjzxVDPoBFmXzCOoAQ0

3LnzefCaaYjPqs09fviwBpobH0SOmWn453S5DDG8XNwtt7OSrjb9A62Hl3cfY4Wtfa67

Gj6a9ET3LkNoAwvDecJphfEFakycagEVsz2vdtGPEQd8c8CSXWlrFZ5ySy7um7aeakhS

hDBQ==

X-Forwarded-Encrypted: i=1; AJvYcCXq0fopOdlBjT2Z4xNmiN0w4Sha9/R3E/DiipZxZtIuc6E7bd4o9gaw49tuzAmz/15Q9jl8Y7E=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yyk45jqwwzV1LnNZUg21CupCPlwWTb4OtgUAcC4WG0bkQQQSN1o

6ZrD0/cqawpZ4RogSe4XLwoXlRHSCv3xgAl+e55m8lB6j9JwIHlSy9COOkxqKuVVSD8TNrj59Nw

wVrzaNGNNnPid3ZIrVmyX580aq+NQOCPZMz5xj5EbGA==

X-Gm-Gg: AZuq6aJmKmJHky6WvvzrGYFFl/pUalhoBnRwN48ZIhdwGMe0DyTkbCgH/RvFFupYyIT

lGz5StI8fmBkdoVxpqbg9M6IYRofunSRWp77qUomP37ltN2Zv3PRnHQjDr9FotnHkgKGgGbPqB/

awDA3STwFdfGcaEvsTG4hQUQ+Zx4p/KqHpxDviD9fGQOmD3XJ87mZ+vtlUtb933rTULGixRm+hV

w/HfStldVMb8mrQ0td3hdq2lMxnHq/LuMKDoX3eDaltYUW8SPcAnQ2eyNPCEzV3H+tTq0zSMmry

ZJKQDSXsU5XQgatzPkk2aM/lOlkLP4URLMP1hHkQwDY1ihBP0NxnEU5/vyfRqfc/FZI8BWTdG5L

LkGQ6u+JsULDQL4wevvkvgVztKqZNELRpDDlxknn2WKogQtc4r7gpv9vw/sJ0ncar6oGdL57LuI

nSLb5Shj6Fz3zr2lTb5sa9C2Fcx5t78Fb6Mw==

X-Received: by 2002:a05:6512:3088:b0:59d:f5a8:278 with SMTP id

2adb3069b0e04-59e4504cd53mr666866e87.22.1770369189579; Fri, 06 Feb 2026

01:13:09 -0800 (PST)

MIME-Version: 1.0

Reply-To: adimfbgrantpageagent@gmail.com

From: Commission European

Date: Fri, 6 Feb 2026 03:13:09 -0600

X-Gm-Features: AZwV_Qi1XVLkbDXh8Tt-Hun1tL4OYtR60QWRLXzNfFIbTO-KbgPLfdJZeLUdWtU

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000aa9877064a243239"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 17.9

X-Spam_score_int: 179

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FACEBOOK INC 1601 WILLOW ROAD MENLO PARK, CA 94025 www.facebook.com

Dear Facebook User: As part of Facebook Corporate social responsibility and

customer loyalty bonus for the Year 2026.



Content analysis details: (17.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.42 listed in will-spam-for-food.eu.org]

[209.85.167.42 listed in will-spam-for-food.eu.org]

[209.85.167.42 listed in will-spam-for-food.eu.org]

[209.85.167.42 listed in will-spam-for-food.eu.org]

[209.85.167.42 listed in will-spam-for-food.eu.org]

[209.85.167.42 listed in will-spam-for-food.eu.org]

[209.85.167.42 listed in will-spam-for-food.eu.org]

[209.85.167.42 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.42 listed in dnsbl.ahbl.org]

[209.85.167.42 listed in dnsbl.ahbl.org]

[209.85.167.42 listed in dnsbl.ahbl.org]

[209.85.167.42 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.42 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.42 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.42 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.42 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.42 listed in list.dnswl.org]

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.42 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 FILL_THIS_FORM Fill in a form with personal information

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?}

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 02:13:00 -0700

Received: from mail-lf1-f46.google.com ([209.85.167.46]:54608)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voHsv-000000004LU-42dW

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 02:12:26 -0700

Received: by mail-lf1-f46.google.com with SMTP id 2adb3069b0e04-59dd3e979ceso610160e87.1

for ; Fri, 06 Feb 2026 01:11:30 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1770369083; cv=none;

d=google.com; s=arc-20240605;

b=fK/+rxAXdvLK1eSZjpWM29jnkuvjLVcM9/N3Q9KyR1z1G6ladoJx7+JaUQW1grW8d7

NuZ+2LUuDMXI37JmgxtMdhXyO7nKmn7NMozHHTXbXfR0tMn94zvI75/V+CZxtkoMSpZD

RyW+k2h4Qj2dCAZFiMrak/o+MWkXadlUheuza+Y2q0wVZyCzVPSQX5x+4whQoPpeuyr8

YhPwJMBd2QM1cAr54z2HU6J0VX2Jpv2W7k+rb0GWefqzroQ0IBej5kKIn4NHXjwZnRcg

QlkjlZyDAusvYWWk9RJOksEiKgkCpgpfJW8U7wxoruE4Q/9rzmZmzT/JjUFPi0ngeZ89

WLgw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=HJcffCim6uI1xk5UzyDitE8/I+ORy4l89lwJMTv9du0=;

fh=8FB2xBclpoMA/jMIhLT59zVSpzCJ8f1F3rM+mwC1rk8=;

b=inc970waTkIoyQ0rkwckn3kDaVOvt7ZjFdiAK7UWxBzb9CAhBlayr57nSJOV2NZgoz

z7wBxnnF9I4mp+0RMNoHwT+MpVyuAtWOI14OTyA4MNLbAK7YEMmgZkOZN6mkWRUFYtoz

GbPsK42+vUuo7HNAwq0D1hra3ZEcg7TA0Nv8ooqhNeKn87JCXGvQ55Om1jGC5/O5aPmi

UUt+0TCMzhsGtWt+tfxqsAsAg08O7UILDjquCa+v+eloCE7Tzg+Ol92N7JUKJpCXsNnf

FEpHKod9kCxQCescAsBD0fAjJGHtaBNFEOSPBll0Csdng6ZtxQrWtCeLv6r0nWC1Yp+g

vPZA==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cgcc.edu; s=google; t=1770369083; x=1770973883; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=HJcffCim6uI1xk5UzyDitE8/I+ORy4l89lwJMTv9du0=;

b=NzjO5aq9Fe77JrzWmFIu4AIX4mqv1MaTlufxplVsJxz7+hZ+LJFwd3hpEhjt3gVTOo

+3/egrEs+U8IH1ejg4Ml3QdV3sPHoAMqP+8yo70Ap645vWg3BPGi+d9+yJS1MR9CYkmq

1kOu14kOfM09LZEDNoqGlndyf5zo5HX4Os/OrhI9w8BiKPp15BPHDGB73youx9Wyk/30

MhzA1oHn43Gb79AyjvFZZji6q9TGLzHvEqIDcm5pfqmOcAWF9gXHM0y46knXQNMLGaEo

pX2MPm6+PqhlBRzpOd0vKf7LUPR36+hGAfZP1md75ShtN6fUtWEVp0ByvClZm++6LoFI

aTfw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1770369083; x=1770973883;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=HJcffCim6uI1xk5UzyDitE8/I+ORy4l89lwJMTv9du0=;

b=gwFQ7FPt3+w+SxsOZUc5laDBEzwOAdtueL3OyrXziIsVakje1E/vbXSLBHstTWfQ2Y

/51+Mgb85tFYrb4SxrG6sk0sqk4lvB+/QoRkjNrupOOjh+XEB8ZpigIR7ahNf8sPIeAu

sqpjzZckxKsUbQA3Y5nul6ICLhPZGZue9mTYNZ7jxoWncRPbOwS09nHfmT1zZNkV6M2R

L2MB+NBqyeubwlJdwWHot2sNCKdZqhzCgwRVh8FCNm+2jOE5ql69r3hX+e/XsOvCWaft

QAtt5IzmfzQtBccGijRoIwgAxe6/PtO3njXuuCQsYGthLEf6s+LDo5VHQhd9wu/67kYo

gDtw==

X-Forwarded-Encrypted: i=1; AJvYcCV8M/x3OxIUiPViRp4bJmHuCtZxmm4Bq5nRH8EV//IdUdHMl9y9IODNpLBks9vNB4agviTo@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yw5kdzOFPlpVEQfoXJ90oNOaNQpWybIJnCpHo8Ctgd1H5TZXGTb

q7j0Z6Hm5jEd6P7LOzXUr7koS6aQzVAzOIFnanexIQPxnJRK//RVUnUeuS2VgY0wgn7JC8s21zz

xa2Op6RAXdeBcHw88EVgTuoq7eywnNH+EB6TxkvSD+A==

X-Gm-Gg: AZuq6aIrsFsMAT4uFPKjL+PHOEOSMP6l7mdypP1m5CJ8Tk2ActSxvcDKm3vT2fyDJML

Mqwj7Ea8cjc7Tl0GuYOHxTLEh1eSSt9xHwn3XMZDyLyv+XTWKRvxOI4NA2EaQ2wCADgLu5SR0Pj

+NTRG7I8z6Tj8nK33PBSXvJ9M64cxAi1hKNPkFIzT2jnYk2fMaLv23uBU7AMeQft2l86XI8Tq4H

cmqRboMxy9T11PXd7bS1KlMD0jxopniyADcDsjcpgJ+4ITaBurG3zW3gS4R9V81vtL49WnbvxES

g6/2VWDO7Ypi9A+ZZo2ya5HviSdKUulc+55sNCEsDRMRy9xDQTPapgcyfzdXGipETPN1E77XRWY

4LQQH9wTH2KeEWs817M2YZVCZvEsEejMa7rjN5exNO/7epglCXW8B7aXF0GaKR3cQc8mZPa3H//

HOCNWYPM2zyws/JYyNm/+9Db3pi/ZVyyjuVg==

X-Received: by 2002:a05:6512:1084:b0:59d:dffe:94b0 with SMTP id

2adb3069b0e04-59e45147fb3mr627361e87.10.1770369082952; Fri, 06 Feb 2026

01:11:22 -0800 (PST)

MIME-Version: 1.0

Reply-To: adimfbgrantpageagent@gmail.com

From: Commission European

Date: Fri, 6 Feb 2026 03:11:23 -0600

X-Gm-Features: AZwV_Qi9-t40FRR7fHlR9yKZ--8X978okYKs0ltaCA6s4PuTwvdFCwNlRd6iYcE

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000004f97ce064a242c54"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 14.2

X-Spam_score_int: 142

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FACEBOOK INC 1601 WILLOW ROAD MENLO PARK, CA 94025 www.facebook.com

Dear Facebook User: As part of Facebook Corporate social responsibility and

customer loyalty bonus for the Year 2026.



Content analysis details: (14.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.46 listed in will-spam-for-food.eu.org]

[209.85.167.46 listed in will-spam-for-food.eu.org]

[209.85.167.46 listed in will-spam-for-food.eu.org]

[209.85.167.46 listed in will-spam-for-food.eu.org]

[209.85.167.46 listed in will-spam-for-food.eu.org]

[209.85.167.46 listed in will-spam-for-food.eu.org]

[209.85.167.46 listed in will-spam-for-food.eu.org]

[209.85.167.46 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.46 listed in dnsbl.ahbl.org]

[209.85.167.46 listed in dnsbl.ahbl.org]

[209.85.167.46 listed in dnsbl.ahbl.org]

[209.85.167.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.46 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.46 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.46 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.46 listed in list.dnswl.org]

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.167.46 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.167.46 listed in sa-accredit.habeas.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.46 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.167.46 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.46 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 FILL_THIS_FORM Fill in a form with personal information

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FORM Lots of money if you fill out a form

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?}

--0000000000004f97ce064a242c54

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



FACEBOOK INC

1601 WILLOW ROAD MENLO PARK, CA 94025

www.facebook.com



Dear Facebook User:



As part of Facebook Corporate social responsibility and customer loyalty

bonus for the Year 2026.



Your Facebook account has Qualified you to receive the sum of 550,000Euro.

(ATM Prepaid Debit Card) and your Facebook account has been marked for

official Verification.



To confirm your claim, You are requested to Verify the following details of

yours to Facebook Verification Management.



Full Names:

Country:

Gender:

Age:

Occupation:

Email:

Phone Number: +

Home Address:



NOTE: Facebook Management already has most or all of these details but

need to be 100% sure that this Facebook account belongs to you.



Congratulations and we look forward to hearing from you soon.



Office of the President

CEO of Facebook

Mr Mark Zuckerberg

Facebook =C2=A9 2026



--0000000000004f97ce064a242c54

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Feb 2026 07:06:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voMT7-00000000Gmg-1C08

for dave@doctor.nl2k.ab.ca;

Fri, 06 Feb 2026 07:05:57 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Feb 2026 07:05:57 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-139.dm.aliyun.com ([140.205.208.139]:42675)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1voGDj-00000000PnI-3egZ

for root@nk.ca;

Fri, 06 Feb 2026 00:25:48 -0700

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.clampfactory.ltd:alibabak_WebBatch:324914

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.clampfactory.ltd; s=aliyun-cn-hangzhou;

t=1770362682; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=J4i8SbV7fsBUizVAEui9JYLjSFGIUULJoesJutonxb8=;

b=BFt7X2S/B6m7yjr8Nr8TgjBcEO5EcU2/iAN0E8iswD7Lc67brsS3OJxL22DM2KvyFboEzS8BpF8gYByfm/qChWngD2okZGyKMZO1ggilA6D78/CI/cHQYkVs2yxLo5qPm0v4q16PWZG4zodp73ZXIxlMq7RjjRkvbNrM1EDG5j4=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1770362682; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=J4i8SbV7fsBUizVAEui9JYLjSFGIUULJoesJutonxb8=;

b=2wXtY3+LI7zGPoNtbG13m8pFmxVvMZsPwDqwCtqbMo2dYQJCwTFGoiXf0MPRM05aW2c27DFGYh7BmFgDkaWAlDRJTHSOc77kNHnfsUIQtw/5F7RktR//2zV/9rA9nWA/PPnF2zNJ9udH4NWj/p13eajqkw4GhZdqmkTCpcBBiu0=

Received: from chitu-hsf(mailfrom:vip@vip.clampfactory.ltd fp:ma_600000271219002191 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Fri, 06 Feb 2026 15:23:05 +0800

Date: Fri, 06 Feb 2026 15:23:05 +0800

From: "Vivian"

To:

Reply-To:

Message-ID: <26ca4d69-5cdf-4931-b846-f25ea86f172d@alibaba.com>

Subject: =?UTF-8?B?SG9zZSBDbGFtcHMgVXNlZCBmb3IgQ29vbGluZyBTeXN0ZW1zIG9mIERhdGEgQ2VudGVy?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000271219002204

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 10.6

X-Spam_score_int: 106

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello friend, Good day!



Content analysis details: (10.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

[140.205.208.139 listed in dnsbl.ahbl.org]

[140.205.208.139 listed in dnsbl.ahbl.org]

[140.205.208.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.139 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[140.205.208.139 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: chvsta.068000.xyz (xyz)]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: ns4.dnsv2.com/112.80.181.155]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?B?SG9zZSBDbGFtcHMgVXNlZCBmb3IgQ29vbGluZyBTeXN0ZW1zIG9mIERhdGEgQ2VudGVy?=

Hello&=

nbsp; friend,

style=3D"text-wrap-mode: wrap;">
rgb(0, 0, 0);">Good day! 

<=

span style=3D"text-wrap-mode: nowrap; color: rgb(0, 0, 0);">I am Vivian from R=

ocketis Hose Clamp Company which is a professional hose clamp man=

ufacturer with over 20 years of production experience.
>

or: rgb(0, 0, 0);">Very happy to learn about your business in Dat=

a Center Project
ystem-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxy=

gen, Ubuntu, Cantarell, "Open Sans", "Helvetica Neue", san=

s-serif; text-wrap-mode: wrap;">, and i am excited to sh=

are that our products are special for cooling system and drain pipe
trong>.

ext-wrap-mode: nowrap;">Our main products=

include:

Stai=

nless steel hose clamps

>Constant tension hose clamps

an style=3D"text-wrap-mode: nowrap; color: rgb(84, 141, 212);">Heavy duty hose=

clamps

mode: nowrap; color: rgb(84, 141, 212);">Wire hose clamps

"text-wrap-mode: wrap;">
141, 212);">V band clamps...

mages/2026/02/06/e65a0470eea010588f0780b120bdde34.jpg" _src=3D"https://s1.imag=

ehub.cc/images/2026/02/06/e65a0470eea010588f0780b120bdde34.jpg" referrerpolicy=

=3D"no-referrer"/>

16px; margin-bottom: 16px; text-wrap-mode: wrap; color: rgb(15, 17, 21); font-=

family: quote-cjk-patch, Inter, system-ui, -apple-system, BlinkMacSystemFont, =

"Segoe UI", Roboto, Oxygen, Ubuntu, Cantarell, "Open Sans"=

, "Helvetica Neue", sans-serif;">As we step into the new year, we wo=

uld be delighted to explore how our expertise can support your business. If yo=

u have any upcoming needs for hose clamps or would like to discuss potential c=

ollaboration, please feel free to reach out. We are always here to assist!

=

6px; text-wrap-mode: wrap; color: rgb(15, 17, 21); font-family: quote-cjk-patc=

h, Inter, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", =

Roboto, Oxygen, Ubuntu, Cantarell, "Open Sans", "Helvetica Neue=

", sans-serif;">Looking forward to the possibility of working together.
p>

: wrap; color: rgb(15, 17, 21); font-family: quote-cjk-patch, Inter, system-ui=

, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen, Ubu=

ntu, Cantarell, "Open Sans", "Helvetica Neue", sans-serif;=

margin-bottom: 0px !important;">Best regards,

graph" style=3D"margin-top: 16px; text-wrap-mode: wrap; color: rgb(15, 17, 21)=

; font-family: quote-cjk-patch, Inter, system-ui, -apple-system, BlinkMacSyste=

mFont, "Segoe UI", Roboto, Oxygen, Ubuntu, Cantarell, "Open San=

s", "Helvetica Neue", sans-serif; margin-bottom: 0px !important=

;">Vivian