Dutch language phish from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 06 Oct 2026 00:48:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xDyxb-00000000LBP-1BZ9
for dave@doctor.nl2k.ab.ca;
Tue, 06 Oct 2026 00:47:35 -0600
Resent-From: The Doctor
Resent-Date: Tue, 6 Oct 2026 00:47:35 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ua1-f70.google.com ([209.85.222.70]:50649)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xDyvJ-00000000Khm-03DT
for doctor@nk.ca;
Tue, 06 Oct 2026 00:44:48 -0600
Received: by mail-ua1-f70.google.com with SMTP id a1e0cc1a2514c-98331b577e4so1806606241.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=aluno-mg-gov-br.20251104.gappssmtp.com; s=20251104; t=1791268971; x=1791873771; darn=nk.ca;
h=content-type:to:from:subject:date:message-id:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=jg4qvfhAncNapEsp15VDs6ALrxTkMu1qArgnRbXxYME=;
b=yx6/hTJKbA59zr3iPMO/+dVJtYIQisi/6ig8/s+Gfg2PDu7WpSJ+khXFfYM+vPYASk
IgSo3G2YIby5WQ5SuALpUeZB7IGLguUGvS0TTute0xdOdDCtEOXXQAUg4ERrStpLc5Rg
64Z8Pxo7jpbApgxhu21hpYScfGiBslkPOkbzRvvhGJhAK7PZEDRAgYoLDuAWjABfM3KX
ajamQJ1xfA9fNhv+dwD4opfyIU4BlWyJiFg/I9kXDaflqtkVaVuq1L7fJMRMTflis51P
JLeAUIuUuRhcVz8ridK1vu/vKyh5DF0TSMFdHVpA1iLiUnQru8JeSIaxc92UsTDVDHwV
eSSQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1791268971; x=1791873771;
h=content-type:to:from:subject:date:message-id:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=jg4qvfhAncNapEsp15VDs6ALrxTkMu1qArgnRbXxYME=;
b=vO8Jp50B4eSyL7fFs7ieC07qxYX89yeKTOqgKd5JnnCATgRxEKLgMywAmlypmNHJ6h
v53ubNXQz90uP3FL2A/UHm50Hk3e767qptS0iCDE3hDxJyIjiMTItP3mpETPWjhHNMYw
93HYcTc4FGwngq1X2L17XgthppPqi5kH/TPo4sndA9TITGSLv8KgmonCpN75xcIIUM2r
n+k+N1dRBbvOzfofoC5TT5AwWXi51JbWuMeoFPhosMpH8+L7PoWw6n6dKi35jwZf0INF
ES7stfhP1dAxI8vJqs0DAB3yUmngfG0oti1gUEpIcOVDFhqtgEAmdF7VS/EqQCXYFmT6
BvSg==
X-Gm-Message-State: AFq9FYLOOpYFWX2IEbLzzroB1xag9MhY9X9oHoQd2UONtaqzWeYqrYrn
LyGWAD/Ip9KSxS6i4KS/BNnHJB/slx+RG0xw4PqS56MZxuly5GS7Ejshs9A8HoWBzFPcwxiytfx
B2bni2yNAIxxCVkN+3cdSJagg+zGXs06HQN1UAmG50G2GkQIfvxu+Y/bmLYP4qmt7MkJy9w==
MIME-Version: 1.0
X-Received: by 2002:a05:6102:f9f:b0:79f:3bbd:aa3f with SMTP id
ada2fe7eead31-7c8799fa46dmr90294137.6.1791268971118; Mon, 05 Oct 2026
23:42:51 -0700 (PDT)
Message-ID:
Date: Tue, 06 Oct 2026 06:42:51 +0000
Subject: =?UTF-8?Q?Tariefwijziging_per_1_november_=E2=80=93_check_uw_besparin?=
=?UTF-8?Q?g?=
From: Sanne van Energiecheck
To: doctor@nk.ca
Content-Type: multipart/alternative; boundary="000000000000b89501065d264e1f"
X-Spam_score: 8.9
X-Spam_score_int: 89
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Energietarieven wijzigen per 1 november Controleer of u nog
wel het voordeligste tarief heeft Hallo,
Content analysis details: (8.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.222.70 listed in dnsbl.ahbl.org]
[209.85.222.70 listed in dnsbl.ahbl.org]
[209.85.222.70 listed in dnsbl.ahbl.org]
[209.85.222.70 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.222.70 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.222.70 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.222.70 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.222.70 listed in dnsbl.ahbl.org]
1.1 URIBL_GREY Contains an URL listed in the URIBL greylist
[URI: klclick.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.70 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.222.70 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.70 listed in wl.mailspike.net]
0.1 TW_IJ BODY: Odd Letter Triples with IJ
0.1 TW_JG BODY: Odd Letter Triples with JG
0.1 TW_JZ BODY: Odd Letter Triples with JZ
0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
1.0 IMPRO_URI_2 No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} =?UTF-8?Q?Tariefwijziging_per_1_november_=E2=80=93_check_uw_besparin?=
=?UTF-8?Q?g?=
--000000000000b89501065d264e1f
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: quoted-printable
Energietarieven wijzigen per 1 november
Controleer of u nog wel het voordeligste tarief heeft
Hallo,
Per 1 november wijzigen veel energieleveranciers hun tarieven. Gemiddeld =
=20
stijgt de energierekening met =E2=82=AC12 per maand. Maar dat hoeft niet vo=
or u te =20
gelden =E2=80=94 mits u tijdig vergelijkt.
=E2=82=AC463
gemiddelde jaarlijkse besparing bij overstappen*
Bereken uw besparing
*Bron: ACM Energiemonitor Q3 2026
Sanne =E2=80=93 Energiecheck
Afmelden | Niet meer ontvangen
--=20
PRESERVE A NATUREZA, EVITE O DESPERD=C3=8DCIO DE PAPEL E PENSE ANTES DE=20
IMPRIMIR.
"Responsabilidade com o MEIO AMBIENTE"
Esta mensagem e=20
quaisquer arquivos em anexo podem conter informa=C3=A7=C3=B5es confidenciai=
s e/ou=20
privilegiadas. Se voc=C3=AA n=C3=A3o for o destinat=C3=A1rio ou a pessoa au=
torizada a=20
receber esta mensagem, por favor n=C3=A3o leia, copie, repasse, imprima, gu=
arde,=20
nem tome qualquer a=C3=A7=C3=A3o baseada nestas informa=C3=A7=C3=B5es. Por =
favor notifique o=20
remetente imediatamente por e-mail e apague a mensagem permanentemente.=20
Este ambiente est=C3=A1 sendo monitorado para evitar o uso indevido de noss=
os=20
sistemas.
--000000000000b89501065d264e1f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
h:600px;margin:0 auto;font-family:Arial,Helvetica,sans-serif;background:#ff=
ffff;">
:30px;text-align:center;">
=
Energietarieven wijzigen per 1 november
Controleer of u nog wel=
het voordeligste tarief heeft
Hal=
lo,
Per=
1 november wijzigen veel energieleveranciers hun tarieven. Gemiddeld stijg=
t de energierekening met €12 per maand. Maar dat hoeft niet voor u te =
gelden =E2=80=94 mits u tijdig vergelijkt.
nd:#e8f5e9;border-radius:8px;">
=
€463
gemiddelde jaarlijkse besp=
aring bij overstappen*
1#t/c/e4325b3094b65ea1e1bd" style=3D"display:inline-block;padding:14px 36px= ;color:#ffffff;font-size:15px;font-weight:bold;text-decoration:none;">Berek= en uw besparing |
*=
Bron: ACM Energiemonitor Q3 2026
1px;color:#999;text-align:center;">
Sanne =E2=80=93 Energiecheck
1#t/u/e4325b3094b65ea1e1bd" style=3D"color:#999;text-decoration:underline;"=
>Afmelden |
01KCGS3SY4J36RX5JNAPV4X2XB_11#t/p/e4325b3094b65ea1e1bd" style=3D"color:#999=
;text-decoration:underline;">Niet meer ontvangen
le=3D"font-size:11px">PRESERVE A NATUREZA, EVITE O DES=
PERD=C3=8DCIO DE PAPEL E PENSE ANTES DE IMPRIMIR.
=3D"font-family:Arial">"Responsabilidade com o MEIO AMBIENTE"
an>
255)">Esta mensagem e q=
uaisquer arquivos em anexo podem conter informa=C3=A7=C3=B5es confidenciais=
e/ou privilegiadas. Se voc=C3=AA n=C3=A3o for o destinat=C3=A1rio ou a pes=
soa autorizada a receber esta mensagem, por favor n=C3=A3o leia, copie, rep=
asse, imprima, guarde, nem tome qualquer a=C3=A7=C3=A3o baseada nestas info=
rma=C3=A7=C3=B5es. Por favor notifique o remetente imediatamente por e-mail=
e apague a mensagem permanentemente. Este ambiente est=C3=A1 sendo monitor=
ado para evitar o uso indevido de nossos sistemas.
--000000000000b89501065d264e1f--