Google AI PRo PHish
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path: <>
Envelope-to: dave@nl2k.ab.ca
Delivery-date: Wed, 21 Oct 2026 03:03:00 -0600
Received: from [103.170.217.130] (port=59679 helo=conkartilza.it.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
id 1xJSD5-00000000P4i-1fgo
for dave@nl2k.ab.ca;
Wed, 21 Oct 2026 03:02:19 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;
h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=dave@nl2k.ab.ca;
bh=Z+3vJegWVWJfurylIcNgGJgAZkA=;
b=QdyHNeh2z3wZOMQwuuOHomKcsEG8R2i82st768rLXe8nY4wdAwda2S3CYOFjJrQrfrIjvfvMO1cx
/EWwK416n9DANhLQ9evOtxG3hiv14cXuZBUHz8eqwDt4lbdP61ITs6qy8bgeTztJ6uj43ND4LQas
sM5r8Pe73RYllz5SPU4zBoWSiW4RpIMQupjasygAZ09YZ+yfukvCgKD055AsphvV49bS35u3/bRq
oOIK3QoAS1M/MHY6yx5l86qLq/Xap6e7la5y43YSDub/z2Wjf23014CN1sr8EDgT3511q7dmF/zh
ddC0DbPdayxg7+espiPQOj4Y0h8jWdrQ7x1U0A==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;
b=MPCFE/3YAGHwhX33DwlnGZXOBbVo5HRZetou2CoRsjpbgYjYUCv2moIovqdJF9PD2acc+/+qBLgo
IZeoSylmRM3sznp24dhudKkLU55Xzhr2lCR55HyoTl0cTcYwOBRbUo+EPhJiDTd5fk4L+AG4z7WH
9xnVCnHHmnEiiuP8TCosMzcgQUmjq9mFQG+vlgJzRw5Sx7Dm6ABDLhPePH141H7cjyBZpgzZa7JC
LcV7nXzaZ/pJ4b0Dpj4u+Gi5ee/9dCBsy14twVC31fWjuVBemLoZmrjQK/CQahYmHEfqe75hbs0x
MhzRGTCTAg0Tvhe7WuSevlSR8TtBKQ2zPSkLbA==;
Date: 10-21-2026
From: AI Pro Deals
To: dave@nl2k.ab.ca
Cc: dave@nl2k.ab.ca
Subject: Get 18 Months of Google AI Pro for Just $50
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Spam_score: 11.4
X-Spam_score_int: 114
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Google AI Pro — Explore the 18-Month Offer Explore AI creativity,
research tools and cloud benefits. Confirm eligibility and plan terms before
activating.
Content analysis details: (11.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.170.217.130 listed in dnsbl.ahbl.org]
[103.170.217.130 listed in dnsbl.ahbl.org]
[103.170.217.130 listed in dnsbl.ahbl.org]
[103.170.217.130 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.170.217.130 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.170.217.130 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.170.217.130 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.170.217.130 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.170.217.130 listed in will-spam-for-food.eu.org]
[103.170.217.130 listed in will-spam-for-food.eu.org]
[103.170.217.130 listed in will-spam-for-food.eu.org]
[103.170.217.130 listed in will-spam-for-food.eu.org]
[103.170.217.130 listed in will-spam-for-food.eu.org]
[103.170.217.130 listed in will-spam-for-food.eu.org]
[103.170.217.130 listed in will-spam-for-food.eu.org]
[103.170.217.130 listed in will-spam-for-food.eu.org]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: keymart.net]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[103.170.217.130 listed in bl.score.senderscore.com]
0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)
1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.4 INVALID_DATE Invalid Date: header (not RFC 2822)
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
Subject: {SPAM?} Get 18 Months of Google AI Pro for Just $50
X-Antivirus: AVG (VPS 261020-6, 10/20/2026), Inbound message
X-Antivirus-Status: Clean

