custom prints discount cpam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 14 Jun 2025 13:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uQWO9-00000000BLh-2Lvs

for dave@doctor.nl2k.ab.ca;

Sat, 14 Jun 2025 13:18:01 -0600

Resent-From: The Doctor

Resent-Date: Sat, 14 Jun 2025 13:18:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-047-045-019-251.biz.spectrum.com ([47.45.19.251]:58299 helo=bestmeiunasolutions.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

id 1uQV5A-00000000GHv-31VG

for root@nk.ca;

Sat, 14 Jun 2025 11:54:28 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nk.ca;

h=MIME-Version:To:From:Subject:Content-Type:Content-Transfer-Encoding; i=root@nk.ca;

bh=AW/p1b/nZykk0klGywZsx6jz8FA=;

b=pxsTyvs4jRAFJSMU16JyJN+4ADpRPAqenapf83D5i5HsHSyGr3/069Y13FzzUZzWx2Xg9eN4d123

CiZrpf9zqOH85Ouds/s8E52vOQGUfBlyc6yz+1DjWtXGVoD5cj0Hl7Qjn7Is49TR8LuYYe4Oz2ov

rBTbisLoSmqaZh8FSqI=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nk.ca;

b=J7HbtFc+BfLbwMmbmXGJSChsv90V9dERaaSUr6HYp5fANcZuYZ8vQQU4xK9CMXRhHZNIifkQ14TY

JW7zEhYqZPN4BRDxOXCfqlP02Vqhw9mFdvRxEj7kGK846kjqAqiCLDDuNONpXWN7BQJVSXL4rUrC

HSQDdHFnErdFw28gJGo=;

MIME-Version: 1.0

To: root@nk.ca

From: =?UTF-8?B?8J2YvvCdmZbwnZmj8J2Zq/CdmZbwnZmo8J2Zi/CdmafwnZme8J2Zo/CdmanwnZmoIPCdmL/wnZme8J2ZqPCdmZjwnZmk8J2ZqvCdmaPwnZmp?=

Subject: =?UTF-8?B?8J2ZkPCdmaUg8J2ZqfCdmaQg8J2ftfCdn68lIPCdmaTwnZmb8J2ZmyDwnZi+8J2ZqvCdmajwnZmp8J2ZpPCdmaIg8J2Zi/CdmafwnZme8J2Zo/CdmanwnZmo?=

Content-Type: text/html



Content-Transfer-Encoding :BASE64

X-Spam_score: 29.0

X-Spam_score_int: 290

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Bring the people you love to your house! Unsubscribe or write

us directly at: 11525A Stonehollow Dr. Suite 100 Austin, TX 78758



Content analysis details: (29.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.4 MISSING_DATE Missing Date: header

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.45.19.251 listed in dnsbl.ahbl.org]

[47.45.19.251 listed in dnsbl.ahbl.org]

[47.45.19.251 listed in dnsbl.ahbl.org]

[47.45.19.251 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.45.19.251 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.45.19.251 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.45.19.251 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.45.19.251 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.45.19.251 listed in will-spam-for-food.eu.org]

[47.45.19.251 listed in will-spam-for-food.eu.org]

[47.45.19.251 listed in will-spam-for-food.eu.org]

[47.45.19.251 listed in will-spam-for-food.eu.org]

[47.45.19.251 listed in will-spam-for-food.eu.org]

[47.45.19.251 listed in will-spam-for-food.eu.org]

[47.45.19.251 listed in will-spam-for-food.eu.org]

[47.45.19.251 listed in will-spam-for-food.eu.org]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[47.45.19.251 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[47.45.19.251 listed in sbl-xbl.spamhaus.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[47.45.19.251 listed in bb.barracudacentral.org]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_MESSAGE BODY: HTML included in message

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

2.0 SUSP_UTF8_WORD_SUBJ Word in Subject using only suspicious UTF-8

characters

3.5 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

2.0 SUSP_UTF8_WORD_FROM Word in From name using only suspicious UTF-8

characters

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

2.4 SUSP_UTF8_WORD_COMBO Words using only suspicious UTF-8 characters +

other signs

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?UTF-8?B?8J2ZkPCdmaUg8J2ZqfCdmaQg8J2ftfCdn68lIPCdmaTwnZmb8J2ZmyDwnZi+8J2ZqvCdmajwnZmp8J2ZpPCdmaIg8J2Zi/CdmafwnZme8J2Zo/CdmanwnZmo?=



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

UPS Phish from Charter Communications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 13:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPnVa-0000000093h-1xpM

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 13:22:42 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 13:22:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:65292 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPgAY-000000005to-34bR

for sales@netknow.ca;

Thu, 12 Jun 2025 05:32:38 -0600

From: Customs Clearance Request

To: sales@netknow.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, sales@netknow.ca NR#9177630858

Date: 12 Jun 2025 06:30:31 -0500

Message-ID: <20250612063031.CCE18B7868AC40BE@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[71.91.239.200 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, sales@netknow.ca NR#9177630858














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear sales@netknow.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>

UPS Phish from Charter Communications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 13:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPnVk-0000000094Q-3Aaw

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 13:22:52 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 13:22:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:49898 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPgPp-00000000Dpw-2Lkr

for usenet@nl2k.ab.ca;

Thu, 12 Jun 2025 05:48:25 -0600

From: Customs Clearance Request

To: usenet@nl2k.ab.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, usenet@nl2k.ab.ca NR#0973576871

Date: 12 Jun 2025 06:46:18 -0500

Message-ID: <20250612064618.D33578F13EA96BFF@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[71.91.239.200 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, usenet@nl2k.ab.ca NR#0973576871














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear usenet@nl2k.ab.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>

UPS Phish from Charter Communications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 13:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPnVi-00000000949-0UG8

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 13:22:50 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 13:22:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:65319 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPgAY-000000005tq-34en

for sales@nk.ca;

Thu, 12 Jun 2025 05:32:38 -0600

From: Customs Clearance Request

To: sales@nk.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, sales@nk.ca NR#7976529990

Date: 12 Jun 2025 06:30:31 -0500

Message-ID: <20250612063031.973BDFBDD60158A7@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[71.91.239.200 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, sales@nk.ca NR#7976529990














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear sales@nk.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>

UPS Phish from Charter Communications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 05:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPgAb-0000000064P-12hs

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 05:32:33 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 05:32:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:62892 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPg8C-000000005kA-3JkF

for root@mail.nl2k.ab.ca;

Thu, 12 Jun 2025 05:30:17 -0600

From: Customs Clearance Request

To: root@mail.nl2k.ab.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, root@mail.nl2k.ab.ca NR#8530204034

Date: 12 Jun 2025 06:28:05 -0500

Message-ID: <20250612062805.44CD545FF26DDE70@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[71.91.239.200 listed in wl.mailspike.net]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, root@mail.nl2k.ab.ca NR#8530204034














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear root@mail.nl2k.ab.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>

UPS Phish from Charter Communications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 05:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPgAJ-0000000062H-0EsB

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 05:32:15 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 05:32:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:62873 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPg8C-000000005k8-37Uq

for root@nl2k.ca;

Thu, 12 Jun 2025 05:30:17 -0600

From: Customs Clearance Request

To: root@nl2k.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, root@nl2k.ca NR#2708338945

Date: 12 Jun 2025 06:28:05 -0500

Message-ID: <20250612062805.A7731203D0D34E26@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[71.91.239.200 listed in wl.mailspike.net]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, root@nl2k.ca NR#2708338945














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear root@nl2k.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>

UPS Phish from Charter Communications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 05:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPgAV-0000000063h-2S5J

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 05:32:27 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 05:32:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:62865 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPg8C-000000005k6-37W2

for root@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 05:30:16 -0600

From: Customs Clearance Request

To: root@doctor.nl2k.ab.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, root@doctor.nl2k.ab.ca NR#8331863515

Date: 12 Jun 2025 06:28:05 -0500

Message-ID: <20250612062805.6949151168038280@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[71.91.239.200 listed in wl.mailspike.net]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, root@doctor.nl2k.ab.ca NR#8331863515














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear root@doctor.nl2k.ab.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>

UPS Phish from Charter Communications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 05:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPgAf-0000000064w-0CZM

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 05:32:37 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 05:32:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:62877 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPg8C-000000005k9-37Y4

for root@nl2k.ab.ca;

Thu, 12 Jun 2025 05:30:17 -0600

From: Customs Clearance Request

To: root@nl2k.ab.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, root@nl2k.ab.ca NR#0861131659

Date: 12 Jun 2025 06:28:05 -0500

Message-ID: <20250612062805.59880929A0681D18@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[71.91.239.200 listed in wl.mailspike.net]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, root@nl2k.ab.ca NR#0861131659














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear root@nl2k.ab.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>

UPS Phish from Charter Communications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 05:32:55 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPgA8-00000000610-33jR

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 05:32:04 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 05:32:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:55755 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPfk2-000000003l8-3FCo

for mailer-daemon@nl2k.ab.ca;

Thu, 12 Jun 2025 05:05:15 -0600

From: Customs Clearance Request

To: mailer-daemon@nl2k.ab.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, mailer-daemon@nl2k.ab.ca NR#0887060865

Date: 12 Jun 2025 06:03:19 -0500

Message-ID: <20250612060319.A0ABF660AB9941E1@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[71.91.239.200 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[71.91.239.200 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[71.91.239.200 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[71.91.239.200 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, mailer-daemon@nl2k.ab.ca NR#0887060865














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear mailer-daemon@nl2k.ab.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>

UPS Phish from Charter Communitications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 05:32:55 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPgAE-0000000061j-21IK

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 05:32:10 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 05:32:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:52207 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPg18-000000005Dk-3qgE

for postmaster@nl2k.ab.ca;

Thu, 12 Jun 2025 05:22:54 -0600

From: Customs Clearance Request

To: postmaster@nl2k.ab.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, postmaster@nl2k.ab.ca NR#6857900439

Date: 12 Jun 2025 06:20:47 -0500

Message-ID: <20250612062047.A1056F8152EA7DDA@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 5.9

X-Spam_score_int: 59

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (5.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[71.91.239.200 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[71.91.239.200 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[71.91.239.200 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[71.91.239.200 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[71.91.239.200 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, postmaster@nl2k.ab.ca NR#6857900439














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear postmaster@nl2k.ab.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>

UPS Phish from Charter Communitications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 05:32:55 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPgAP-0000000062x-47r5

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 05:32:21 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 05:32:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:62871 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPg8C-000000005k7-37VY

for root@nk.ca;

Thu, 12 Jun 2025 05:30:17 -0600

From: Customs Clearance Request

To: root@nk.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, root@nk.ca NR#3164686974

Date: 12 Jun 2025 06:28:05 -0500

Message-ID: <20250612062805.98C468E4C05A5A14@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[71.91.239.200 listed in wl.mailspike.net]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, root@nk.ca NR#3164686974














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear root@nk.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>

UPS Phish from Charter Communitications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 04:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPfC3-000000001TI-0Bsr

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 04:29:59 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 04:29:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:63579 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPf92-0000000019H-35hA

for games@nl2k.ab.ca;

Thu, 12 Jun 2025 04:27:00 -0600

From: Customs Clearance Request

To: games@nl2k.ab.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, games@nl2k.ab.ca NR#0165725172

Date: 12 Jun 2025 05:24:53 -0500

Message-ID: <20250612052452.DF28222E5270E5C5@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[71.91.239.200 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[71.91.239.200 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[71.91.239.200 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[71.91.239.200 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, games@nl2k.ab.ca NR#0165725172














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear games@nl2k.ab.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>

UPS Phish from Charter Communitications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 04:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPfBt-000000001Sm-2dOy

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 04:29:49 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 04:29:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:63326 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPf0P-000000000Zm-0HCL

for doctor@nk.ca;

Thu, 12 Jun 2025 04:18:05 -0600

From: Customs Clearance Request

To: doctor@nk.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, doctor@nk.ca NR#8886485998

Date: 12 Jun 2025 05:16:02 -0500

Message-ID: <20250612051602.41F8D8F9AF13B96F@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, doctor@nk.ca NR#8886485998














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear doctor@nk.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>

UPS Phish from Charter Communitications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 04:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPfBn-000000001SL-3Wtg

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 04:29:43 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 04:29:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:63309 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPf0P-000000000Zj-0DaL

for doctor@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 04:18:05 -0600

From: Customs Clearance Request

To: doctor@doctor.nl2k.ab.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, doctor@doctor.nl2k.ab.ca NR#0842652097

Date: 12 Jun 2025 05:16:02 -0500

Message-ID: <20250612051602.A74AE3838FE3D207@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, doctor@doctor.nl2k.ab.ca NR#0842652097














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear doctor@doctor.nl2k.ab.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>

UPS Phish from Charter Communitications

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Jun 2025 04:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPfBc-000000001Ro-28RN

for dave@doctor.nl2k.ab.ca;

Thu, 12 Jun 2025 04:29:32 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Jun 2025 04:29:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from syn-071-091-239-200.biz.spectrum.com ([71.91.239.200]:49704 helo=ups.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uPeif-00000000P9k-45s8

for bin@nl2k.ab.ca;

Thu, 12 Jun 2025 03:59:45 -0600

From: Customs Clearance Request

To: bin@nl2k.ab.ca

Subject: Action Required: Customs Clearance for Your UPS Shipment, bin@nl2k.ab.ca NR#4183310313

Date: 12 Jun 2025 04:57:38 -0500

Message-ID: <20250612045738.57028D3A454CB739@ups.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, Thank you for your purchase. Please review

the details below.



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

[71.91.239.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.91.239.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

[71.91.239.200 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Action Required: Customs Clearance for Your UPS Shipment, bin@nl2k.ab.ca NR#4183310313














-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rgb=

(237, 237, 237); font-variant-ligatures: normal; font-variant-caps: normal;=

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color:=20

initial;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

idth=3D"572" height=3D"10" style=3D"margin: 0px; line-height: 1px; font-siz=

e: 0px;" bgcolor=3D"#ededed"> 

'margin: 0px; width: 572px; text-align: center; line-height: 1px; backgroun=

d-image: url("https://ci3.googleusercontent.com/meips/ADKq_NahEMK9ZVPpYp2Om=

W__9IQ9GPk_7fktqpa1fuAjCxX5y58zQ8tkP8b916uQFiV8PDhaMWMJINMGuo0NezGyW2Nm1rU=

=3Ds0-d-e1-ft#https://wnu.com/secure/images/header_bare.jpg");'>





-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, sa=

ns-serif; font-size: small; font-style: normal; font-weight: 400; word-spac=

ing: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligature=

s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" bgcolor=3D"#ffffff" border=3D"0"=20

cellspacing=3D"0" cellpadding=3D"0">

gin: 0px;" bgcolor=3D"#d5d5d5">
" bgcolor=3D"#ffffff">
llspacing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=3D"#ffff=

ff"> 



(139, 139, 139); line-height: 22px; font-family: Helvetica, Arial, sans-ser=

if; font-size: 18px; font-weight: normal;" border=3D"0" cellspacing=3D"0" c=

ellpadding=3D"0">






tr>




width=3D"29" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;


able>

ght: 1px; font-size: 0px;"> 
x;">

Dear Customer,


eight: 1px; font-size: 0px;"> 
&=

nbsp;

Thank you for your pu=

rchase. Please review the details below.


margin: 0px; line-height: 1px; font-size: 0px;"> 

th=3D"29" height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: =

0px;"> 
-height: 1px; font-size: 0px;"> 
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
style=3D"margin: 0px;">Member ID: 2881275869

r>Dear bin@nl2k.ab.ca,


We are contacting you regarding your incoming international shipment. Befor=

e it can be released by Canadian Customs, additional documentation or payme=

nt of duties/taxes may be required.
=



Please contact UPS Brokerage or visit [
psCANADA_percelupdate2025upsCAinvoiceredirect.html">store link] to subm=

it the necessary forms.


Thank you,


UPS Canada Brokerage Department

px; line-height: 1px; font-size: 0px;"> 

-size: 0px;"> 
x; line-height: 1px; font-size: 0px;"> 
"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 

x; font-size: 0px;"> 
>
-size: 0px;"> 

rgin: 0px; line-height: 1px; font-size: 0px;"> 
height=3D"20" style=3D"margin: 0px; line-height: 1px; font-size: 0px;">&nbs=

p;
x; font-size: 0px;"> 

px; line-height: 1px; font-size: 0px;"> 
gin: 0px; line-height: 1px; font-size: 0px;"> 

=3D"29" height=3D"0" style=3D"margin: 0px; line-height: 1px; font-size: 0px=

;"> 
ght: 1px; font-size: 0px;"> 
=3D"margin: 0px; line-height: 1px; font-size: 0px;"> 



px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: pre; orphans: 2; widows: 2; backgroun=

d-color: rgb(31, 31, 31); font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia=

l; text-decoration-style: initial;=20

text-decoration-color: initial;">

margin: 0px; line-height: 1px; font-size: 0px;"> 

ellpadding=3D"0">


t-size: 0px;" bgcolor=3D"#ffffff"> 

ght=3D"1" style=3D"margin: 0px; line-height: 1px; font-size: 0px;" bgcolor=

=3D"#ebebeb"> 

center" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

th=3D"570" height=3D"40" style=3D"margin: 0px; line-height: 1px; font-size:=

0px;" bgcolor=3D"#ffffff"> 



(0, 0, 0); line-height: 16px; font-family: Helvetica, Arial, sans-serif; fo=

nt-size: 14px; font-weight: bold;" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0">
ody>

; font-size: 0px;"> 
gin: 0px;">


dding=3D"0">
body>

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

t; color: rgb(139, 139, 139); line-height: 18px; font-family: Helvetica, Ar=

ial, sans-serif; font-size: 12px; font-weight: normal;" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

&=

nbsp;		UPS Canad=

a Brokerage Department
ht: 1px; font-size: 0px;"> 
=3D"margin: 0px; color: rgb(139, 139, 139); text-decoration: none;">
>+1-800-PICK-=

UPS
">

®

"margin: 0px; line-height: 1px; font-size: 0px;"> 
8" valign=3D"top" style=3D"margin: 0px;">


px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=

; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=

play: inline !important; white-space: normal; orphans: 2; widows: 2; backgr=

ound-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial;=20

text-decoration-color: initial;">
">UPSAdministratio@ups.com
0px; line-height: 1px; font-size: 0px;"> 

able width=3D"570" align=3D"center" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">

line-height: 1px; font-size: 0px;" bgcolor=3D"#ffffff"> 

>




gb(161, 161, 161); text-transform: none; line-height: 19px; letter-spacing:=

normal; font-family: Helvetica, Arial, sans-serif; font-size: 12px; font-s=

tyle: normal; font-weight: normal; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; background-color: rgb(237, 237, 237); font-variant-l=

igatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=

; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;" border=3D"=

0" cellspacing=3D"0" cellpadding=3D"0">


=3D"margin: 0px; line-height: 1px;">
block;" alt=3D"" " border=3D"0" data-bit=3D"iit">

dth=3D"572" style=3D"margin: 0px;">Copyright © 2025 UPS Canada Brokera=

ge Departmen • All Rights Reserved

" height=3D"30" style=3D"margin: 0px;">



>