spectrum mail phish from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 20 Jul 2026 08:05:00 -0600
Received: from mail-oa1-f50.google.com ([209.85.160.50]:38329)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wlobh-00000000LlR-2hhZ
for dave@doctor.nl2k.ab.ca;
Mon, 20 Jul 2026 08:04:41 -0600
Received: by mail-oa1-f50.google.com with SMTP id 586e51a60fabf-44d5c09fb9cso588942fac.1
for
ARC-Seal: i=1; a=rsa-sha256; t=1784556220; cv=none;
d=google.com; s=arc-20260327;
b=DYMCUfer9ZB2EVjHWn9oQvLmLWLlv2NyiWSYfNVsbzgYFXChC8JgGBCISUvRwrje7R
/Rng8aX6t3B3lZ9nJam3O1x3tPgELhncsti4V/5ANq/Pk/M9n6SCrEDUVvrHoAD84zJO
6beBGPCHd8DPhK36unkNZWAWXS7qeDycHQXIdr84j/x61C8+igZKLzMWqS/hPKvo3Eib
/nzVNBbMpTqPZxPAkSdg6WzP6OmLp1kTGfBXrXIBHpQ3R9OdIUgIr0dY8ZitdvJ0pfpM
1Fe/irlHAfVFcKOWOwiXUkT/hPVF34e7TQcRX6QmcZ6BNBSU3f7K4V5EXiVVFUJdnc8s
m7xA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=AKs0cGj5s3nBvmm0Fn/O3EZPETZNdC3VmYFXdutIXCo=;
fh=4FyzTWw0/hXOD6h73Ijb71FBlc+N+0RmRJyHfBnluX0=;
b=sX9hNcDZjxoqhZsz+3eKugV/evj7fUWeo5bhiPC/6m0gUOR6g7TZOGYRq4thkVAxcX
Jw5m1OjbVH1+NFFeeomKTmZC84jQQTsoM+j0VvV3Gs/g7D4QLV+g1/IXxe9/7oq0NkeN
uXipUNs+YwVcR2KD+0UToN697rcr9QCovicDy5K1EhUCyRJ0jA8jT6nwcaD+mliq8co9
8VgnvpUxd+Iqx68LSVILXu7DLrCrm3Ag5CcIU+u89k2dwcrhCuIdVeZUdozCgZYs+rH+
95eWK2FFYyNPI88BuesCHAu745b+3Y1Hg7fc7+IRVVdPnVsvBX7jqcRtpLdbkczjE/s1
YOqQ==;
darn=doctor.nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1784556220; x=1785161020; darn=doctor.nl2k.ab.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=AKs0cGj5s3nBvmm0Fn/O3EZPETZNdC3VmYFXdutIXCo=;
b=aytUwC9LZvbBKfpgu1lK2LcLDG5SsZP8WzPPP1/rnsCq/7cizS1eKMNMCQe9F73zG+
yKYA8S/OqPOdh7+gL51LwTTnlSeFlIwjbvPu6Sqg9/5kAxMFAXgHYGVL13vEYLZG/YKj
d9GTnFUUYjQgMSlORO5T8PX3y/yBArnxBnmRUqxVegVf0VP/QX+hIB5fu3JKt4NJNqcw
DS0wcWaR2g3J/+TLLmrmghkH5SlhbDS49fX8p97Gi09Vzzx2WQ8QHpnX1UzzgN3gnSuJ
EhPi5HKHauFNSdRfY/B1i40IdSD7TJI/orrNUC0ck4b7dP3wKCoZTeCTqizR9mZLiS08
xh3Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1784556220; x=1785161020;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=AKs0cGj5s3nBvmm0Fn/O3EZPETZNdC3VmYFXdutIXCo=;
b=ooLqmJlm84KFJ2p4ypFl5Yxs/9ULElJaBuAsXyEiAMBmTcCTtPa1XjQD5GKSbsZQeD
aUBtms4DJ5/gO15UBLNf11xIJJvznRqKtGBH51xWUS4MGbGikQyzZIkrJ+u+vcMM5MIb
fOp3nfAWAByrqpc2/TT3wTk3r3GlIaxfVNMjJc4ven/y/Ti9PziPkrbmklclxhV89HpX
DzOFxSzchQoswiua3Gpxye1CmUuKzH3aEPvrGq8ClWP1JsdFYJC+gzptyK5mpZFPtHwy
61sNWQnNJByffCIeDzQjLErJIjLEAOo9C7HzrcY3Jm7ZQO5n3q4hjgb8fMLNCKxqWXcl
oJ3g==
X-Forwarded-Encrypted: i=1; AHgh+Rpllgo4+Syevuiv122hkD55584UYJIs4e2ISgfAQYGQ+0bqa5CrNIZy7iCVB3ywoKwfH3us@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YzA7p8p5sFAxfFCpr/RqwhAMz44d8aVYjgWIcPJxRmif2d8/4O7
Kr0u5jnbO52PjrZ074DqvUuxOhgn4azet37xmFFTEo59SJdRYgzn5g5xRsSSQ2RnTXr+3gM3a00
Y/nXwkueUzikStAEPBZMsFBvipHdngA==
X-Gm-Gg: AfdE7cl0XRlOI0Lx2PZ7Y/tJPszDWnh7nAfD253Ok7UBgHpi6sSPhqszq46GZLRmo5J
nOjQn/X5HHf+aXVlpiPZccxaN109sxoCV+Zfi7TI7M6yFTh2UkasgZY+z4jUR6mI0cYurLQw8kh
WQhOvR1mPo3aegqmZgHkRaJLPhadS8qhnVEvChT7vDIi6MeIWMbnEtxZWOmdfkDw/hWDzi8/VSI
6u/Ivs+1AHkwk4NoERqYGDFkby2f+xMU6yYMuEAd/WdDfhtUM+ixRr/9AT01jSIhUMdex5N4S9K
6/ec9gCU1BSjY3dQcg==
X-Received: by 2002:a05:6830:6d06:b0:7e3:f809:7984 with SMTP id
46e09a7af769-7ed9a7dbd0fmr6017730a34.1.1784556220026; Mon, 20 Jul 2026
07:03:40 -0700 (PDT)
MIME-Version: 1.0
From: "MySpectrum.net"
Date: Mon, 20 Jul 2026 07:03:26 -0700
X-Gm-Features: AUfX_mwULWIDl0D-g1ztYtT0KmZ-9A6-SGh0pYSUppO_b3FOdt3rqLeFcZVZNco
Message-ID:
Subject: =?UTF-8?Q?IMPORTANT_MAIL_FROM_SPECTRUM=F0=9F=93=A5?=
To: user@spectrum.com
Content-Type: multipart/alternative; boundary="00000000000093922506570b5f9e"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 5.3
X-Spam_score_int: 53
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: SPECTRUM ® Dear User, Last month, we notified you about
upcoming changes to our Terms of Service, security measures, and Privacy
Policy. This is a reminder that, effective July 20th, 2026, older versions
of the Spectrum Ma [...]
Content analysis details: (5.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.160.50 listed in dnsbl.ahbl.org]
[209.85.160.50 listed in dnsbl.ahbl.org]
[209.85.160.50 listed in dnsbl.ahbl.org]
[209.85.160.50 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.160.50 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.160.50 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.160.50 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.160.50 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.160.50 listed in will-spam-for-food.eu.org]
[209.85.160.50 listed in will-spam-for-food.eu.org]
[209.85.160.50 listed in will-spam-for-food.eu.org]
[209.85.160.50 listed in will-spam-for-food.eu.org]
[209.85.160.50 listed in will-spam-for-food.eu.org]
[209.85.160.50 listed in will-spam-for-food.eu.org]
[209.85.160.50 listed in will-spam-for-food.eu.org]
[209.85.160.50 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.50 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[dareabayomiq(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.50 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.160.50 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.9 URI_PHISH Phishing using web form
Subject: {SPAM?} =?UTF-8?Q?IMPORTANT_MAIL_FROM_SPECTRUM=F0=9F=93=A5?=
--00000000000093922506570b5f9e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
SPECTRUM =C2=AE
Dear User,
Last month, we notified you about upcoming changes to our Terms of Service,
security measures, and Privacy Policy. This is a reminder that, effective
July 20th, 2026, older versions of the Spectrum Mail system will be
discontinued.
To ensure continued access to your email account and any stored
information, please review and accept the updated Terms of Service before
the deadline above. Make sure all your information is accurate before
submitting.
Update Your Email Account Now
Important: If this update is not completed by July 24th, 2026, access to
your mailbox and any stored data may be discontinued..
Please do not reply to this message. This email address is not monitored
and responses will not be received..
Spectrum Mail Team.
=C2=A9 2026 Spectrum. All rights reserv
--00000000000093922506570b5f9e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
3px;color:rgb(0,0,0);font-family:-apple-system,BlinkMacSystemFont,"Hel=
vetica Neue","Segoe UI",Arial,sans-serif,"Apple Color E=
moji","Segoe UI Emoji","Segoe UI Symbol"">
yle=3D"background-color:transparent;font-family:helvetica,arial,sans-serif;=
font-size:xx-large;letter-spacing:-0.32px;color:rgb(0,0,255);outline:none">=
SPECTRUM
f,sans-serif;font-size:15px;outline:none">=C2=A0
round-color:transparent;font-family:serif,sans-serif;font-size:15px;color:r=
gb(0,0,255);outline:none">
nd-color:inherit;outline:none">
line:none">
serif;outline:none">
ge;outline:none">=C2=AE=C2=A0=C2=A0=
:-apple-system,BlinkMacSystemFont,"Helvetica Neue","Segoe UI=
",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji&=
quot;,"Segoe UI Symbol"">
Dear Use=
r,
Last month, we notified you about upc=
oming changes to our Terms of Service, security measures, and Privacy Polic=
y. This is a reminder that, effective July 20th, 2026, older versions of th=
e Spectrum Mail system will be discontinued.
1em">To ensure continued access to your email account and any stored inform=
ation, please review and accept the updated Terms of Service before the dea=
dline above.=C2=A0Make sure all your information is accurate before submitt=
ing.
m.jotform.com/261986007654061" rel=3D"noopener" target=3D"_blank" style=3D"=
color:rgb(25,106,212);word-break:break-word;outline:none">
style=3D"color:rgb(17,85,204);outline:none">Up=
date Your Email Account Now
1em;outline:none">
">Important
r=3D"#222222" style=3D"outline:none">:=C2=A0If this update is not completed=
by July 24th, 2026, access to your mailbox and any stored data may be disc=
ontinued..
one">
none">Please do not reply to this message. This email address is not monito=
red and responses will not be received..
n:0px 0px 1em;outline:none">
line:none">Spectrum Mail Team.
=C2=A9 2026 Spectr=
um. All rights reserv
--00000000000093922506570b5f9e--