BBB Complaints phish Part 1
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 03 Jun 2026 17:52:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wUvNE-00000000GvL-3OwR
for dave@doctor.nl2k.ab.ca;
Wed, 03 Jun 2026 17:51:48 -0600
Resent-From: The Doctor
Resent-Date: Wed, 3 Jun 2026 17:51:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from wm4-131.speedhosting.co.kr ([111.92.189.131]:35644)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wUqNV-00000000OqY-03fD
for doctor@nk.ca;
Wed, 03 Jun 2026 12:31:54 -0600
X-AuthUser: kschoi@hanulit.co.kr
Received: from WYWUFTKV ([62.42.154.199]:55843)
by wm4-131.speedhosting.co.kr with [XMail 1.27 Inames120228 ESMTP Server]
id
Thu, 4 Jun 2026 03:30:38 +0900
Message-ID:
From: BBB Great West + Pacific
To:
Subject: =?utf-8?B?WW91ciBCQkIgR3JlYXQgV2VzdCArIFBhY2lmaWMgcmVjZWl2?=
=?utf-8?B?ZWQgYSBjb21wbGFpbnQgYWJvdXQgeW91ciBidXNpbmVzcy4=?=
Date: Wed, 03 Jun 2026 19:30:33 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="cde5c482645115291312cfd40003efb0"
X-Spam_score: 10.9
X-Spam_score_int: 109
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: MAIN 600.0px CONTAINER --> LOGO / HEADER
--> CARD 1: HEADLINE / INTRO -->BBB Great West + Pacific sent you
a message about Complaint Received: ID 27621257 NEW CARD: B [...]
Content analysis details: (10.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[111.92.189.131 listed in dnsbl.ahbl.org]
[111.92.189.131 listed in dnsbl.ahbl.org]
[111.92.189.131 listed in dnsbl.ahbl.org]
[111.92.189.131 listed in dnsbl.ahbl.org]
[62.42.154.199 listed in dnsbl.ahbl.org]
[62.42.154.199 listed in dnsbl.ahbl.org]
[62.42.154.199 listed in dnsbl.ahbl.org]
[62.42.154.199 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[111.92.189.131 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[111.92.189.131 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[111.92.189.131 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[111.92.189.131 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[62.42.154.199 listed in will-spam-for-food.eu.org]
[62.42.154.199 listed in will-spam-for-food.eu.org]
[62.42.154.199 listed in will-spam-for-food.eu.org]
[62.42.154.199 listed in will-spam-for-food.eu.org]
[62.42.154.199 listed in will-spam-for-food.eu.org]
[62.42.154.199 listed in will-spam-for-food.eu.org]
[62.42.154.199 listed in will-spam-for-food.eu.org]
[62.42.154.199 listed in will-spam-for-food.eu.org]
[111.92.189.131 listed in will-spam-for-food.eu.org]
[111.92.189.131 listed in will-spam-for-food.eu.org]
[111.92.189.131 listed in will-spam-for-food.eu.org]
[111.92.189.131 listed in will-spam-for-food.eu.org]
[111.92.189.131 listed in will-spam-for-food.eu.org]
[111.92.189.131 listed in will-spam-for-food.eu.org]
[111.92.189.131 listed in will-spam-for-food.eu.org]
[111.92.189.131 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[62.42.154.199 listed in sbl-xbl.spamhaus.org]
[62.42.154.199 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[62.42.154.199 listed in zen.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[111.92.189.131 listed in bl.score.senderscore.com]
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.6 J_CHICKENPOX_22 BODY: 2alpha-pock-2alpha
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels
Subject: {SPAM?} =?utf-8?B?WW91ciBCQkIgR3JlYXQgV2VzdCArIFBhY2lmaWMgcmVjZWl2?=
=?utf-8?B?ZWQgYSBjb21wbGFpbnQgYWJvdXQgeW91ciBidXNpbmVzcy4=?=