X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 05 Oct 2026 23:04:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDxLQ-00000000AE3-3OEp

for dave@doctor.nl2k.ab.ca;

Mon, 05 Oct 2026 23:04:04 -0600

Resent-From: The Doctor

Resent-Date: Mon, 5 Oct 2026 23:04:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m81128.netease.com ([47.88.81.128]:50088)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDpTf-00000000OrT-1IkY

for sales@nk.ca;

Mon, 05 Oct 2026 14:39:41 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1009979_292327557.1791232708251"

To: sales

Reply-To: longxiangleather@slphgloves.com

Subject: =?UTF-8?B?UmU6IExlYXRoZXIgJiBSZWN5Y2xlZCBGYWJyaWMgR2xvdmVzIGZvciBZb3VyIEJyYW5k?=

X-Priority: 3

MIME-Version: 1.0

Received: from vivian@vexaimportspark.com( [10.139.5.212] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 6 Oct 2026 04:38:28 +0800 (GMT+08:00)

From: SLPH Gloves

Date: Tue, 6 Oct 2026 04:38:28 +0800 (GMT+08:00)

X-WM-Tid: 0aa10dca0e6e00f8kunm2056b8b7150c49

DKIM-Signature: a=rsa-sha256;

b=EpLOczxflDEgkQAYeNMBH/YjJO+5sJRKhprqnMJhajQkNSwjCR1RooIOEcJmSI4K0yXAON084huHdzQUUDXiQNRN0MKOhFCg7mLg8Wbkj6Ba8dIircGq4bFnkDexBAxI60Pm4h/tKrqYNKlZakSppg7hEgJ9HjscWtrSnO09fBY=; c=relaxed/relaxed; s=default; d=vexaimportspark.com; v=1;

bh=NrwYiMW8E9HhWiKf2SpZMD3QMIjMs09tKaL9hwKDnZM=;

h=date:mime-version:subject:message-id:from;

Message-ID:







Hi ,



Just following up on my previous email to see if you're planning any new glove styles for your collection.



We'd be happy to suggest suitable styles and materials based on your target price range, or develop samples from your designs.



Would you like me to send you a few styles to review?

















Serena.G

longxiangleather@slphgloves.com





On Thu, Sep 24, 2026, SLPH Gloves wrote:



-----Original Message-----

From: SLPH Gloves

Sent Time: Thu, Sep 24, 2026

To: [sales ]

Subject: Leather & Recycled Fabric Gloves for Your Brand





Hi ,



Are you looking to add leather or recycled fabric gloves to your collection?



We manufacture fashion gloves and offer OEM production under your own brand.



We can develop samples based on your designs or reference photos, with material options to suit your requirements and budget.



Would you like us to send over our catalogue?









Serena.Geng

longxiangleather@slphgloves.com

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!

NetKnow

Netknow now at 380699 from 411534 at Netcraft and pfs compliant



A significant increase! We must do

1. security audits regularly
2. check on illegitimate traffic hitting the web server



3. Effiency of server
and
4. keep design current!

How do we compare with other providers in

Edmonton, Alberta, Canada?

Rogers

Rogers Business Solutions

which rank 7894 from 7915 and are hosted in Europe.

Telus and reviews

Next we have Telus.com

ranked by Netcraft at 7931 from 7319 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :

• NCIX FORUMS



• DSL Reports

Government of Alberta

The Government of Alberta Website

ranks 13236 from 13162 by Netcraft and seems to hosted on Cloudfare.

City of Edmonton

The City of Edmonton ranks 37646 from 37543 by Netcraft and hosted by Google.

University of Alberta

The University of Alberta ranks 48720 from 49638 hosted by Amazon Techonologies.

Juno and NetZero

We have Juno Internet ranked on top

at 342987 from 354161 who are the owners of

US Based Netzero at Netcraft Rank 140715 from 130093 .

TekSavvy

TekSavvy ranks 167201 from 161297 and are hosted by Microsoft

NAIT / Northern Alberta Institute of Technology

NAIT ranks 245495 from 250522 hosted by Microsoft .

Grant MacEwen University

MacEwan ranks 343065 from 304843 .

Internet Centre / CCINet

Internet Centre

rank 312425 from 321307. Their partner Rack Nine ranks > 2000000.

Netknow again

We at Netknow are at 380699 from 18857 since the start of 2026.

Shaw Cable

Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 383800 from 383980 and hosted by Akamai in Europe .



Reviews of Shaw are available :

• Rate It All



• Review Stream



• Review Stream Number 2





• DSL reports

Xplornet

xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 639103 from 639405 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.

Distributel / 3Web / CIA

Cybersurf

is ranked 934723 from 832576 and seems to be hosted in USA by DigitalOcean.

Primus

Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.

Northern lights Fiber

Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.

OkayVPN

OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.

Radiant Communications / goco.ca

Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .

Tera Byte Edmonton and reviews

Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.

MCSnet

MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .

Nucleus Internet Services

After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .

4Web

4web ranks >2000000 from >2000000 .

Alentus / Wolfpaw

Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000

Yellowpencil

Yellowpencil Ranks >2000000 from >2000000

WSI Corporation

Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.

Uniserve / Interbaun

Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.

Clearwave Broadband

Clearwave Broadband ranks

at >2000000 from >2000000

Platinum Communications

Platinum Communications Corp.

bought out by Xplornet .

Wild Rose Internet

Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet

TIC Internet

TIC Internet

ranks >2000000 from >2000000 ( I do remember you).

Nisa Custom Internet Solutions

Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft

MediaShaker

Media Shakers of Edmonton

ranks >2000000 from >2000000

Koi Media

Koi Media

rank >2000000 from >2000000

WebFire

Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.

Core Network Solutions Inc.

Core Network Solutions Inc.

ranks at >2000000 from >2000000 .

The Network Centre

The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.

Open Concept Internet, Inc.

Open Concept Internet, Inc.

rank > 2000000 from > 2000000

Techalta

Interspots of Edmonton

acquired by Techalta ;

Yegtel

Yegtel rank > 2000000 .

Internet Crossroads

Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 05 Oct 2026 13:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDoDX-000000008Bw-11H5

for dave@doctor.nl2k.ab.ca;

Mon, 05 Oct 2026 13:19:19 -0600

Resent-From: The Doctor

Resent-Date: Mon, 5 Oct 2026 13:19:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pz2-f36.google.com ([74.125.228.36]:37371)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDmKj-00000000JM5-0xxq

for sales@nk.ca;

Mon, 05 Oct 2026 11:18:13 -0600

Received: by mail-pz2-f36.google.com with SMTP id d2e1a72fcca58-88a0f29ce98so1001320b3a.3

for ; Mon, 05 Oct 2026 10:17:16 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webappsconsultants.com; s=google; t=1791220631; x=1791825431; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=aLYse9AgT8RYZ+SXVteVsLuhHZodrG98PiRvEqXJjDo=;

b=GInSRXAvblV5EWDTUhpLDVkd1qg5hoX4waHxKqqYiic32CuMhldsLKjaTxTcuFYt7v

AxXqgI9TkUK6/gc9L73aCKiS5kluVUi3pvO525Ft/x6jK34gakUA8kSus183sQTV1Bac

QJWPTGFdU+CheMou9JMD8dXKnJplWMtxGfD2ASTFYVy6A+LvPDPOFIDGKdmk+lZucLUt

bv1PWBCcglPMoEWZNlk+WWVtviRbUmJEyS9WEayKKqqqJwVpJetCNtYTARpUzVJMoOD8

N/zlH7FAvCz0034+J/y8/UTwXWOmEgwTnfN06vhUOhcP1ay1GnQv67l+iRH0tt3n2wvQ

zi7Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791220631; x=1791825431;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=aLYse9AgT8RYZ+SXVteVsLuhHZodrG98PiRvEqXJjDo=;

b=zjWNfwGysB84L2Qfkg4hqnBY7a/aE7CimKA60SBgHE1PjekdcWiUTQAJ5uDCg9bTCt

OyLpLejzfO8mIhtjp0oMyiNKt5yuJaUBs5HkqEcQvXm5WzGwyVeYxuRIQPK0TGufLmNC

y/v3CXAzm5lo9Eo28AEfRJeI4C6tyOUucaIo+elH5i4aSzQgdQ5sapG2hYblngTnXTqv

NsncI6g+/vTIv8ET2poVIIbX87uF3CqBUxCmqT0/kfuLSrG6lkQJoFiWpMWyWHRaB20t

SodDVNc9qQeHuZnIs94WcnZA4JifltIKQ44O26/KaMXHZytQf3ZRe19Z1fF7e3eCbdK3

ow5g==

X-Gm-Message-State: AFuF++nxuNM1GTkTkzscp5x4THJTw0fTfy8gpSArFGFpOi58VYStpTkB

xxgsQz7xxy1BefoOllkqVqNmf1+GjKaoyxAU5HATLPj7t/BKAWiso00fRFhfwTcI4qoQQ1hMmuj

Sfvp926U=

X-Gm-Gg: AYBFou1jWtxd+Lj4ru9BI75h8JRG4efNuGSyvTz1rhpgwN+cojDaX/nQA2mydVGslBM

qj6Ia07gZCIDQecn9X5soN8aEBTqJw6znu5JOrH3dEC4VQf3LSW8tmbRU78D6H9Hd7XrFpVnjxC

6iP4/TVhZS3Y9pdVzWZw92dhpjUHrx7cwvUnLjAmg5sGAoL+Lvvj3512pA3NrlHBSHqJcNsZTZX

hgYShmzKNLW8jOemB3z8E9n03fBTqVJJ0iDCnQfHSHvChn0WeYB8B1QWKXILr/rXhXTJm/DAfxt

ImxWfTU3HQC0OQcCGyDjyvm04IwL2FC6Nax83QmLQL1Jw1UScQsTXLIrzCb2s/QT8zwmU/018LY

aC6E7QMyn+GfI89S9AYGPcbR+5LwddbGJdPcoIQK05CWY2j3edDDrOdpFLRiia3jBh9VkhBpb22

I7lCQUGlHPVBW6QpSVFTzVKwP3wE5pUWncXjDB4lUGXutA6m9C1DEf10XFDs1Zpip07gUQa5UMD

zP/hVdn1w02FUThmkBt

X-Received: by 2002:a05:6a20:3d10:b0:3dd:a196:30a4 with SMTP id adf61e73a8af0-3e0bd4bbb09mr11707756637.84.1791220630708;

Mon, 05 Oct 2026 10:17:10 -0700 (PDT)

Received: from [127.0.0.1] ([103.106.232.102])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-88b0d344d96sm3813308b3a.59.2026.10.05.10.17.09

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Mon, 05 Oct 2026 10:17:09 -0700 (PDT)

From: Paul

To: sales@nk.ca

Subject: Get Better SEO Results www.nk.ca ?

Message-ID: <9e2bbd4a-819d-8e41-6da4-168d783fb034@webappsconsultants.com>

Content-Transfer-Encoding: quoted-printable

Date: Mon, 05 Oct 2026 17:17:08 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 16.1

X-Spam_score_int: 161

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Would you like to see an SEO report for www.nk.ca? It

will show specific improvements that can help increase your search rankings.





Content analysis details: (16.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.106.232.102 listed in will-spam-for-food.eu.org]

[103.106.232.102 listed in will-spam-for-food.eu.org]

[103.106.232.102 listed in will-spam-for-food.eu.org]

[103.106.232.102 listed in will-spam-for-food.eu.org]

[103.106.232.102 listed in will-spam-for-food.eu.org]

[103.106.232.102 listed in will-spam-for-food.eu.org]

[103.106.232.102 listed in will-spam-for-food.eu.org]

[103.106.232.102 listed in will-spam-for-food.eu.org]

[74.125.228.36 listed in will-spam-for-food.eu.org]

[74.125.228.36 listed in will-spam-for-food.eu.org]

[74.125.228.36 listed in will-spam-for-food.eu.org]

[74.125.228.36 listed in will-spam-for-food.eu.org]

[74.125.228.36 listed in will-spam-for-food.eu.org]

[74.125.228.36 listed in will-spam-for-food.eu.org]

[74.125.228.36 listed in will-spam-for-food.eu.org]

[74.125.228.36 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.106.232.102 listed in dnsbl.ahbl.org]

[103.106.232.102 listed in dnsbl.ahbl.org]

[103.106.232.102 listed in dnsbl.ahbl.org]

[103.106.232.102 listed in dnsbl.ahbl.org]

[74.125.228.36 listed in dnsbl.ahbl.org]

[74.125.228.36 listed in dnsbl.ahbl.org]

[74.125.228.36 listed in dnsbl.ahbl.org]

[74.125.228.36 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.106.232.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.106.232.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.106.232.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.106.232.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.106.232.102 listed in sbl-xbl.spamhaus.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: webappsconsultants.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: webappsconsultants.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: webappsconsultants.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: webappsconsultants.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.228.36 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.228.36 listed in wl.mailspike.net]

Subject: {SPAM?} Get Better SEO Results www.nk.ca ?

Hi,

Would you like to see an SEO report for www.nk.ca? It will =

show specific improvements that can help increase your search rankings.=

May I send you our quote and previous SEO work?

Kind Regards,=

Paul

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 05 Oct 2026 10:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDlNp-00000000AlB-2XpC

for dave@doctor.nl2k.ab.ca;

Mon, 05 Oct 2026 10:17:45 -0600

Resent-From: The Doctor

Resent-Date: Mon, 5 Oct 2026 10:17:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [158.199.129.240] (port=19174 helo=m113.secure.ne.jp)

by doctor.nl2k.ab.ca with smtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDioD-000000004o7-37BP

for DOCTOR@NL2K.AB.CA;

Mon, 05 Oct 2026 07:32:26 -0600

Received: (qmail 73466 invoked from network); 5 Oct 2026 22:31:22 +0900

Received: from unknown (HELO ?195.210.113.33?) (h?upbaker@soullogis.co.jp@195.210.113.6)

by 0 with SMTP; 5 Oct 2026 22:31:22 +0900

From: "EVRl"

To: DOCTOR@NL2K.AB.CA

Subject: Important update regarding your parcel delivery H09Z878R1995

Date: 5 Oct 2026 14:31:21 +0100

MIME-Version: 1.0

Message-ID: <20261219222158.16@soullogis.co.jp>

User-Agent: Roundcube Webmail/1.4.12

X-Sender: "EVRI"

X-Originating-IP: 69.227.47.25

X-Priority: 3 (Normal)

X-Mailer: Roundcube Webmail/1.6.0

List-Unsubscribe:

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Evri Update Maintenance and Reliability Update. This message

confirms that parcel staging has completed the required administrative checkpoint.

No manual intervention is needed for domestic routing. Tracking Ref [...]





Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[69.227.47.25 listed in will-spam-for-food.eu.org]

[69.227.47.25 listed in will-spam-for-food.eu.org]

[69.227.47.25 listed in will-spam-for-food.eu.org]

[69.227.47.25 listed in will-spam-for-food.eu.org]

[69.227.47.25 listed in will-spam-for-food.eu.org]

[69.227.47.25 listed in will-spam-for-food.eu.org]

[69.227.47.25 listed in will-spam-for-food.eu.org]

[69.227.47.25 listed in will-spam-for-food.eu.org]

[195.210.113.6 listed in will-spam-for-food.eu.org]

[195.210.113.6 listed in will-spam-for-food.eu.org]

[195.210.113.6 listed in will-spam-for-food.eu.org]

[195.210.113.6 listed in will-spam-for-food.eu.org]

[195.210.113.6 listed in will-spam-for-food.eu.org]

[195.210.113.6 listed in will-spam-for-food.eu.org]

[195.210.113.6 listed in will-spam-for-food.eu.org]

[195.210.113.6 listed in will-spam-for-food.eu.org]

[158.199.129.240 listed in will-spam-for-food.eu.org]

[158.199.129.240 listed in will-spam-for-food.eu.org]

[158.199.129.240 listed in will-spam-for-food.eu.org]

[158.199.129.240 listed in will-spam-for-food.eu.org]

[158.199.129.240 listed in will-spam-for-food.eu.org]

[158.199.129.240 listed in will-spam-for-food.eu.org]

[158.199.129.240 listed in will-spam-for-food.eu.org]

[158.199.129.240 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[158.199.129.240 listed in dnsbl.ahbl.org]

[158.199.129.240 listed in dnsbl.ahbl.org]

[158.199.129.240 listed in dnsbl.ahbl.org]

[158.199.129.240 listed in dnsbl.ahbl.org]

[69.227.47.25 listed in dnsbl.ahbl.org]

[69.227.47.25 listed in dnsbl.ahbl.org]

[69.227.47.25 listed in dnsbl.ahbl.org]

[69.227.47.25 listed in dnsbl.ahbl.org]

[195.210.113.6 listed in dnsbl.ahbl.org]

[195.210.113.6 listed in dnsbl.ahbl.org]

[195.210.113.6 listed in dnsbl.ahbl.org]

[195.210.113.6 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[158.199.129.240 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[158.199.129.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[158.199.129.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[158.199.129.240 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[158.199.129.240 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[158.199.129.240 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

Subject: {SPAM?} Important update regarding your parcel delivery H09Z878R1995






emas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office"=

>




">


=3D1">














margin: 0; padding: 0; background-color: #F4F6F8; font-family: Arial, sans-=

serif;">=20

max-height:0px;max-width:0px;opacity:0;overflow:hidden;mso-hide:all;">

Maintenance and Reliability Update. This message confirms that parc=

el staging has completed the required administrative checkpoint. No manual =

intervention is needed for domestic routing. Tracking Reference: rm4731. St=

atus: Staged.

t: 100%; mso-table-lspace: 0pt; mso-table-rspace: 0pt; margin: 0 auto; max-=

width: 600px; background-color: #ffffff; border-radius: 8px; box-shadow: 0 =

4px 15px rgba(0,0,0,0.05); overflow: hidden;" align=3D"center" width=3D"100=

%" max-width=3D"600" border=3D"0" cellpadding=3D"0" cellspacing=3D"0">

=20=20=20=20=20=20=20=20=20=20=20=20

adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: 0pt; padding: 30px 2= 0px;" align=3D"center" bgcolor=3D"#007BC4"> t-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: 0pt" width=3D= "100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0"> s-text-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: 0pt" ali= gn=3D"left" width=3D"50%"> ic; border: 0; outline: none; text-decoration: none; display: block;" src= =3D"https://www.evri.com/_assets/images/evri/emails/5e0bc296-95db-4b54-9952= -2c1cb73f4966_Evri%2Blogo.png" alt=3D"Evri" width=3D"85" height=3D"25"> s-text-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: 0pt" ali= gn=3D"right" width=3D"50%"> ic; border: 0; outline: none; text-decoration: none; display: block; border= -radius: 50%; border: 2px solid #fff;" src=3D"https://www.evri.com/_assets/= images/emails/avatars.png" alt=3D"Avatar" width=3D"60" height=3D"60"> s-text-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: 0pt; pad= ding-top: 25px;" colspan=3D"2" align=3D"left"> x; font-weight: bold; margin: 0; line-height: 1.3;"> Urgent: Re-delivery Needed

adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: 0pt; padding: 40px 3= 0px;" align=3D"center"> t: 1.6; margin: 0 0 20px 0; text-align: left;"> Hello there User, t: 1.6; margin: 0 0 25px 0; text-align: left;"> Your delivery could not be completed today as there= was no safe place to leave the item. =20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20 t-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: 0pt; backgrou= nd-color: #F8F9FA; border: 1px solid #DFE1E6; border-radius: 6px; margin-bo= ttom: 30px;" width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0= "> s-text-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: 0pt; pad= ding: 15px 20px; border-bottom: 1px solid #DFE1E6;" align=3D"left"> 14px;">Tracking Number: 5px; font-weight: bold;"> H09Z66R8227h s-text-size-adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: 0pt; pad= ding: 15px 20px;" align=3D"left"> 14px;">Redelivery Fee: 6px; font-weight: bold;"> £ 2.25 t: 1.6; margin: 0 0 30px 0; text-align: center;"> Please secure the redelivery fee to ensure your pac= kage is not shipped back to the origin. t-size-adjust: 100%; background-color: #00014D; color: #ffffff !important; = display: inline-block; font-family: Arial, sans-serif; font-size: 16px; font-weight: b= old; line-height: 48px; text-align: center; text-decoration: none; width: 100%; max-width: 320px; border-radius: 30px" href=3D"htt= ps://usedconstructionmachinery.co.uk/in/tools/" class=3D"main-btn"> Update Preferences t: 1.5; margin: 0; text-align: center;"> Note: Yo= ur parcel will be held at our local depot for 24 to 48 hours g> before being automatically returned to the sender.

adjust: 100%; mso-table-lspace: 0pt; mso-table-rspace: 0pt; padding: 25px 3= 0px;" align=3D"center" bgcolor=3D"#007BC4"> t: 1.6; margin: 0; text-align: center; opacity: 0.9;"> Evri is a trading name of Hermes Parcelnet Limited.= Registered in England and Wales No. 03900782 Registered office: Capitol House, 1 Capitol Close, = Morley, Leeds, LS27 0WH

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 05 Oct 2026 10:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDlNj-00000000Aka-01l7

for dave@doctor.nl2k.ab.ca;

Mon, 05 Oct 2026 10:17:39 -0600

Resent-From: The Doctor

Resent-Date: Mon, 5 Oct 2026 10:17:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from luvz.gxxbsi.com ([4.225.222.13]:50323)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDiml-000000004ei-0BzF

for root@nk.ca;

Mon, 05 Oct 2026 07:30:54 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=luvz.gxxbsi.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;

i=tbgfdtcx@luvz.gxxbsi.com;

bh=O3a7NiQDsV6ViZbarKaoMdrluysEHlp3L3BFA8ijyXE=;

b=WyjhBwTgocoTSka4OIodRXPf+8ASdkIdi6IL834NznAJMPHIUS1CX/oiRxfyUBI5xaKwfc6oNAyh

I51v+lcQGX0lTOTLA5G6G2ccRhfLIaou0XYDLnYgJ/K5NjgmGZPEfOH/6/B1CBRFHO4FHFIEx1PZ

ynxMdF11BTvQwQTAkjveCq1LO7b+5VD0ymDpXnoWlSoir5u/sNosXzTwZWTItUuZ3NFBFh4GSjwb

zZfTVmj/MnpzEgh3kt2bhSEq2me8axEvC714T2fXBejnFLa9gt+4lBY+NF7k4NBxzEnlm3M8zHai

gFdouTaP0o1gHfolAziqcLyQvlNhxj5SWKOwpw==

Content-Type: multipart/alternative;

boundary="===============8255052029500806211=="

MIME-Version: 1.0

From: Saxo

To: root@nk.ca

Subject: Account Protection Review - Please Confirm Your Saxo Security Details

Date: Mon, 05 Oct 2026 09:29:57 -0400

Message-ID: <179120699733.4223.10335405951413035074@luvz.gxxbsi.com>

Reply-To: clientservices@saxobank.com

Feedback-ID: campaign:clientservices@saxobank.com:mailer

X-Auto-Response-Suppress: OOF, DR, RN, NRN

X-Spam_score: 39.5

X-Spam_score_int: 395

X-Spam_bar: +++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: SAXO - ACCOUNT PROTECTION REVIEW ================================

One item needs your confirmation. Dear root,



Content analysis details: (39.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[4.225.222.13 listed in will-spam-for-food.eu.org]

[4.225.222.13 listed in will-spam-for-food.eu.org]

[4.225.222.13 listed in will-spam-for-food.eu.org]

[4.225.222.13 listed in will-spam-for-food.eu.org]

[4.225.222.13 listed in will-spam-for-food.eu.org]

[4.225.222.13 listed in will-spam-for-food.eu.org]

[4.225.222.13 listed in will-spam-for-food.eu.org]

[4.225.222.13 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[4.225.222.13 listed in dnsbl.ahbl.org]

[4.225.222.13 listed in dnsbl.ahbl.org]

[4.225.222.13 listed in dnsbl.ahbl.org]

[4.225.222.13 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[4.225.222.13 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[4.225.222.13 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[4.225.222.13 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[4.225.222.13 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 HK_RANDOM_FROM From username looks random

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_YOUR BODY: mangled your

2.3 MANGLED_BELOW BODY: mangled below

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[4.225.222.13 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_Q FULL: Dec/Hex char Enc [Qq]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_X FULL: Dec/Hex char Enc [Xx]

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_V FULL: Dec/Hex char Enc [Vv]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_J FULL: Dec/Hex char Enc [Jj]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_B FULL: Dec/Hex char Enc [Bb]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 ISO_7BITS ISO charset announced as 7 bit (or bad rule ?)

2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels

Subject: {SPAM?} Account Protection Review - Please Confirm Your Saxo Security Details



--===============8255052029500806211==

Content-Type: text/plain; charset=iso-8859-1

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



SAXO - ACCOUNT PROTECTION REVIEW

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=

=3D=3D=3D=3D=3D=3D=3D



One item needs your confirmation.



Dear root,



As part of the account protection review we are carrying out for clients in

Canada, we compared the security settings registered on your profile with t=

he

requirements now in force. The result is summarised below.



SECURITY ITEM STATUS

------------------------------------------------------------------

Two-step sign-in verification Action required

Contact details on file Up to date

Platform access settings Confirmation pending

Account standing Active

------------------------------------------------------------------



To close the review, sign in and confirm the pending item. Your access stays

as it is while the item is open, but we ask you to complete it today.



Review and confirm:

https://www.qhdzth.com/?email=3Droot@nk.ca&token=3DktV7IgFLUmbpgi3cZmaz2VyM



The review is shown on your account page after you sign in.



If the status above does not match what you expect, contact us directly by

phone.



Thank you for helping us keep your account protected.

Saxo Bank - Client Services





=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=

=3D=3D=3D=3D=3D=3D=3D

EXAMEN DE LA PROTECTION DU COMPTE

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=

=3D=3D=3D=3D=3D=3D=3D



Bonjour root,



Dans le cadre de l'examen de protection des comptes que nous r=E9alisons po=

ur

les clients au Canada, nous avons compar=E9 les param=E8tres de s=E9curit=

=E9

enregistr=E9s dans votre profil avec les exigences d=E9sormais en vigueur. =

Le

r=E9sultat figure dans le tableau ci-dessus.



Pour clore l'examen, veuillez vous connecter et confirmer l'=E9l=E9ment en

attente. Nous vous invitons =E0 le faire d=E8s aujourd'hui.





=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=

=3D=3D=3D=3D=3D=3D=3D

This is an automated message. Please do not reply to this email.

(c) 2026 Saxo Bank A/S. All rights reserved. Saxo Bank A/S, Philip Heymans =

All=E9 15, DK-2900 Hellerup, Denmark.

Ce message automatique ne peut pas recevoir de r=E9ponse.



--===============8255052029500806211==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit

A protection review of y​our Saxo account shows t​hat one item needs your c‍onfirmation. Please review the summary and co​mplete it.

SAXO ACCOUNT PROTECTION RE‍VIEW One item needs your conf‌irmation Dear root, As part of the account pr‍otection review we are​ carrying out for clients in Canada, we compar‍ed the security settings registered on your p‍rofile with the require‍ments now in force. The ‌result is summarised b​elow. SECURITY ITEM STATUS Two-step sign-in verification Action required Contact details on file‍ Up to date Platform access settin‍gs Confirmation pending Account standing Active To close the review, sig‍n in and confirm the pendi‍ng item. Your access st‍ays as it is while the item is open, but we ask you to complete it today. Review and Confirm The review is shown on you​r account page after yo‌u sign in. If the status above doe‌s not match what you expect, contact us directly‌ by phone. Thank you for helping us k‍eep your account protected. Bonjour root, Dans le cadre de l'examen‍ de protection des com‌ptes que nous réalisons pour les client‌s au Canada, nous avons‍ comparé les paramètres de sécurité enregistrés dans votre profil avec les exigences désormais en vigueur. Le résultat figure dans le t​ableau ci-dessus. Pour clore l'examen, v​euillez vous connecter‍ et confirmer l'élément en attente. Nous vous invitons à le faire dès aujourd'hui. This is an automated message. Please do not reply to this email. © 2026 Saxo Bank A/S. All r​ights reserved. Saxo ​Bank A/S, Philip Heyma​ns Allé 15, DK-2900 Hellerup,‌ Denmark. Ce message automatique‌ ne peut pas recevoir de‍ réponse.

--===============8255052029500806211==--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 05 Oct 2026 10:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDlNd-00000000Ajy-0kg3

for dave@doctor.nl2k.ab.ca;

Mon, 05 Oct 2026 10:17:33 -0600

Resent-From: The Doctor

Resent-Date: Mon, 5 Oct 2026 10:17:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from rtko.hdbhe.com ([172.196.45.108]:40911)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDimL-000000004cB-0GXq

for sales@nk.ca;

Mon, 05 Oct 2026 07:30:28 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=rtko.hdbhe.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;

i=cabmvcta@rtko.hdbhe.com;

bh=SeYI0CwAhbSh11Z172IlwGV1ZkO6/Xk13fiFs5/MSFc=;

b=HCAQ3DOZeTTUWpFiNAOEytU3e60IcSFzYqWUtD66ZoWEK8lgixbulk/UmiQQR/r2CA4oY8lsAt+a

GDJGfIypktw9pgSzZczpiFpW4wtsyzX4YUEp3c6n5EFS6NDcypuH7bu7rO8dI0Bljupr/CTOhZEX

kmXn5+F+O8wjEVWGhema4Sk6u96Ly/pV+Eba74Sr6RZd3KGo1ygvUfP4iXkzhi389g5/QhRAbouE

i69oSHiRdFOMJrAiP+dzvUPa6EvVvAB3bOYmncVHfcygOa6sT7JkTUgBzfNk/LdVUfW1Pw2FWltT

UQxcnkc3sT2chXeHmWkwr2WJOR3wCSvVU7B/3g==

Content-Type: multipart/alternative;

boundary="===============1951070702024399013=="

MIME-Version: 1.0

From: Saxo Client Services

To: sales@nk.ca

Subject: Action Required - Saxo Account Security Update - Action requise -

Mise a jour de securite Saxo

Date: Mon, 05 Oct 2026 09:29:30 -0400

Message-ID: <179120697027.4409.2903121402946732004@rtko.hdbhe.com>

Reply-To: clientservices@saxobank.com

Feedback-ID: campaign:clientservices@saxobank.com:mailer

X-Auto-Response-Suppress: OOF, DR, RN, NRN

X-Spam_score: 37.6

X-Spam_score_int: 376

X-Spam_bar: +++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Saxo - Account Security Update ==============================

Dear sales, Saxo has updated the account security measures that apply to

clients in Canada. To keep full access to your account and your trading platforms,

you need to sign in and complete the confirmation proced [...]



Content analysis details: (37.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.196.45.108 listed in will-spam-for-food.eu.org]

[172.196.45.108 listed in will-spam-for-food.eu.org]

[172.196.45.108 listed in will-spam-for-food.eu.org]

[172.196.45.108 listed in will-spam-for-food.eu.org]

[172.196.45.108 listed in will-spam-for-food.eu.org]

[172.196.45.108 listed in will-spam-for-food.eu.org]

[172.196.45.108 listed in will-spam-for-food.eu.org]

[172.196.45.108 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.196.45.108 listed in dnsbl.ahbl.org]

[172.196.45.108 listed in dnsbl.ahbl.org]

[172.196.45.108 listed in dnsbl.ahbl.org]

[172.196.45.108 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.196.45.108 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.196.45.108 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.196.45.108 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.196.45.108 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 HK_RANDOM_FROM From username looks random

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_YOUR BODY: mangled your

2.3 MANGLED_LIMITD BODY: mangled limited

2.3 MANGLED_BELOW BODY: mangled below

2.3 MANGLED_ACCNT BODY: mangled account(s)

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_X FULL: Dec/Hex char Enc [Xx]

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_V FULL: Dec/Hex char Enc [Vv]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_K FULL: Dec/Hex char Enc [Kk]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_B FULL: Dec/Hex char Enc [Bb]

0.0 GB_CUSTOM_HTM_URI Custom html uri

0.5 ISO_7BITS ISO charset announced as 7 bit (or bad rule ?)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[172.196.45.108 listed in bl.score.senderscore.com]

Subject: {SPAM?} Action Required - Saxo Account Security Update - Action requise -

Mise a jour de securite Saxo



--===============1951070702024399013==

Content-Type: text/plain; charset=iso-8859-1

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



Saxo - Account Security Update

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=

=3D=3D=3D=3D=3D



Dear sales,



Saxo has updated the account security measures that apply to clients in Can=

ada. To keep full access to your account and your trading platforms, you ne=

ed to sign in and complete the confirmation procedure.



What you need to do:

1. Sign in to your Saxo account with your usual credentials.

2. Review the security details registered on your profile.

3. Confirm the update to keep your account fully active.



Complete the confirmation here:

https://www.dydongxu.com/?email=3Dsales@nk.ca&token=3D2HwRd5Ss4WOxNs3Bc2tzn=

zXz



The procedure takes less than two minutes when your contact details are up =

to date. Please complete it today. Until the update is registered on your a=

ccount, some account functions may be temporarily limited.



Thank you for helping us keep your account protected.



Saxo Bank - Client Services





-------------------------------

MISE A JOUR DE SECURITE

-------------------------------



Bonjour sales,



Saxo a renforc=E9 les mesures de s=E9curit=E9 applicables aux clients au Ca=

nada. Pour conserver l'acc=E8s complet =E0 votre compte et =E0 vos platefor=

mes de n=E9gociation, vous devez vous connecter et compl=E9ter la proc=E9du=

re de confirmation indiqu=E9e ci-dessus.



Cette proc=E9dure prend moins de deux minutes. Nous vous invitons =E0 la co=

mpl=E9ter d=E8s aujourd'hui.



Merci de contribuer =E0 la protection de votre compte.





-------------------------------

This is an automated message. Please do not reply to this email.

We recommend that you always access your account directly from our website =

rather than through links in an email.

(c) 2026 Saxo Bank A/S. All rights reserved. Saxo Bank A/S, Philip Heymans =

All=E9 15, DK-2900 Hellerup, Denmark.

Vous recevez ce courriel en tant que client de Saxo au Canada. Ce message a=

utomatique ne peut pas recevoir de r=E9ponse.



--===============1951070702024399013==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit

An update to Saxo accou‍nt security measures is‌ now in effect for clien‍ts in Canada. Please si​gn in to review and conf​irm your security set​tings today.

SAXO BE INVESTED ACCOUNT SECURITY Update required: conf‌irm your account secur‌ity settings Dear sales, Saxo has updated the acc‌ount security measures that apply to clients in Canada. To keep full ac‍cess to your account and​ your trading platfor‌ms, you need to sign in and complete the confirmation procedure below. The procedure takes les‍s than two minutes whe‌n your contact details a‍re up to date. Please com​plete it today. What you need to do 1. Sign in to your Saxo a​ccount with your usual‌ credentials. 2. Review the security‌ details registered on your profile. 3. Confirm the update to keep your account fu‌lly active. Complete Security Upd‌ate If the button does not op​en, sign in to your acco​unt directly at home.sa‌xo as usual. Please complete this confirmation today. Until the update is regist​ered on your account, s‌ome account functions m​ay be temporarily limite‌d. Thank you for helping us keep your account p​rotected. Saxo Bank - Client Services MISE A JOUR DE SECURI‍TE Bonjour sales, Saxo a renforcé les mesures de sécurité applicables aux clients au Canada. Pour conse​rver l'accès complet à votre compte et à vos plateformes de négociation, vous devez v​ous connecter et compléter la procédure de confirmation in​diquée ci-dessus. Cette procédure prend moins de deux​ minutes. Nous vous inv‍itons à la compléter dès aujourd'hui. Merci de contribuer à la protection de votre compte. This is an automated mes‌sage. Please do not reply to this email. We recommend that you always access your accou‌nt directly from our web‍site rather than throu‌gh links in an email.‌ © 2026 Saxo Bank A/S. All r​ights reserved. Saxo Ba‍nk A/S, Philip Heymans Allé 15, DK-2900 Hellerup, ​Denmark. Vous recevez ce courrie‍l en tant que client de Saxo au Canada. Ce mes​sage automatique ne peu‍t pas recevoir de réponse.

--===============1951070702024399013==--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 05 Oct 2026 07:29:04 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDikJ-000000001J5-3Myc

for dave@doctor.nl2k.ab.ca;

Mon, 05 Oct 2026 07:28:47 -0600

Resent-From: The Doctor

Resent-Date: Mon, 5 Oct 2026 07:28:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a3-15.smtp-out.eu-west-1.amazonses.com ([54.240.3.15]:55295)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <010201a10bf1b3c1-d3e986a7-939c-4a4d-a495-dc78c7c6421c-000000@send.aiground.eu>)

id 1xDhQI-000000006y3-0veE

for sales@nk.ca;

Mon, 05 Oct 2026 06:03:38 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=resend;

d=aiground.eu; t=1791201752;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;

bh=tSiWNwFB4TI5e2U8qMpB24OqFKfZdR++ZAQ4JdZmk1E=;

b=Mj9tqMTf9beBpCWfWHR3+zcu41GkueekLNoh90haEKkI2AYfe0qb/puE9FgQeXoL

R6rU3TggHfjA/6LNSC0h+OruyY3uGsQPrvR+A2+ZZCO0Xk/6RUN/7PNFgfMXLaen+Dn

5ik0pVEsEpFK7ml3uhIBtBsMjXk6sqG4wUdT8LQU=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=shh3fegwg5fppqsuzphvschd53n6ihuv; d=amazonses.com; t=1791201752;

h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type:Feedback-ID;

bh=tSiWNwFB4TI5e2U8qMpB24OqFKfZdR++ZAQ4JdZmk1E=;

b=N5ZGou3jRIfqWwLsFzVnPCGOXxvclEGCdjidpDNBL6sQwy3EJmv6WCHxd2gpjNeU

7zeovJvHt1DLdSrtPmpe6LofnQPLZ0TEEr0DA6DZxhZpa3LIR4twJeSiZe8ynSwizHd

lErY56wJZ5VqCG7HGSLSe2viEdK7Bkh4bszxBR/g=

From: Tihomir

To: sales@nk.ca

Subject: Cut no-shows. Fill cancellations automatically.

Message-ID: <010201a10bf1b3c1-d3e986a7-939c-4a4d-a495-dc78c7c6421c-000000@eu-west-1.amazonses.com>

Date: Mon, 5 Oct 2026 12:02:32 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-54cbb13618e4a67d-Part_1"

Feedback-ID: :1.eu-west-1.qJF8u3iaPHs2tNXX5+rEcIa43egqROntjcNybVgl4SvXCSANsn83bXXRJWkP2NpWo74i6xsdMeBQ/PwZMh+43fXGgxM8zh5/7NTRV81gvWoshYdiB4v/bwFU5XsRbaFA8BjEeMTIvpZ4cg5wtmzL9Mc+inFl6K5wascfm6PcOF0=:1.eu-west-1.duyiEkLYPi4nGdRFd7LaGmAjRWieZlOvGu1wIBVR/Ks=:AmazonSES

X-SES-Outgoing: 2026.10.05-54.240.3.15

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, We build appointment automation systems for gyms and studios

- SMS reminders, one-tap confirm and reschedule links, and automatic waitlist

filling when someone cancels. Your calendar stays full without your team

chasing clients.



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.3.15 listed in will-spam-for-food.eu.org]

[54.240.3.15 listed in will-spam-for-food.eu.org]

[54.240.3.15 listed in will-spam-for-food.eu.org]

[54.240.3.15 listed in will-spam-for-food.eu.org]

[54.240.3.15 listed in will-spam-for-food.eu.org]

[54.240.3.15 listed in will-spam-for-food.eu.org]

[54.240.3.15 listed in will-spam-for-food.eu.org]

[54.240.3.15 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.3.15 listed in dnsbl.ahbl.org]

[54.240.3.15 listed in dnsbl.ahbl.org]

[54.240.3.15 listed in dnsbl.ahbl.org]

[54.240.3.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.3.15 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.3.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.3.15 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.3.15 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.3.15 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.6 J_CHICKENPOX_84 BODY: 8alpha-pock-4alpha

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[54.240.3.15 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.240.3.15 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Cut no-shows. Fill cancellations automatically.



----_NmP-54cbb13618e4a67d-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hi,



We build appointment automation systems for gyms and studios - SMS =

reminders, one-tap confirm and reschedule links, and automatic waitlist =

filling when someone cancels.



Your calendar stays full without your team =

chasing clients.



aiground.tech

----_NmP-54cbb13618e4a67d-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Hi,





We build appointment automation systems for gyms and studios - SMS =


reminders, one-tap confirm and reschedule links, and automatic waitlist =


filling when someone cancels.





Your calendar stays full without your team =


chasing clients.





aiground.tech

----_NmP-54cbb13618e4a67d-Part_1--