costco Phish
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 09 Apr 2026 12:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1wAuFr-000000008h8-2eUY
for dave@doctor.nl2k.ab.ca;
Thu, 09 Apr 2026 12:37:27 -0600
Resent-From: The Doctor
Resent-Date: Thu, 9 Apr 2026 12:37:27 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [213.176.16.238] (port=52191 helo=weslandbol.nl)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))
id 1wAtIO-000000004dJ-3mmC
for doctor@nl2k.ab.ca;
Thu, 09 Apr 2026 11:36:09 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;
h=Date:To:From:Subject:Content-Type:Mime-Version:Content-Transfer-Encoding; i=doctor@nl2k.ab.ca;
bh=O0bpsvYCJ5/7vzcUr3jc9dZYEXk=;
b=J5Igyo8iErRnjxwRzFS0yXwLTSfCiIm4gTO5teGX7vtZYKkztFdUtL1Tn8K89KqB6D5o9oG5/972
1IOoTyNn5DN8opFVqqwcyoqorzqUR4GVnLwqyqqA6mVUSTdD88NuG4N/0Rq2e6M8RNZMUJoAwLVU
i674KU6c7/81IVSfaP2rd3JcqdRioNmcCFt2jWcWhinJaVyTPdEORsCTglExH/jDfFcR7LNJJKoG
89pYWfEqGSv/nbZC0H++CFW99E7AqEqw9lIkhQOT+NsexQ6LoXxgyUESx6f7CwiMB+/RWOoMFy9p
SxDt9G8BlPiuohHtKSYil8X/LTKTAuq7feRjOA==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;
b=Zs23ahDnjqr+W17paNw6OREs+5XXuLOuwthJcuyL9IqCqNQEu9Qq77XQa9viOAoY/TJVAoR948lN
9ZetVIY7hkaDtbyLmmLhrmZSszz5Kh2oVkADmJ05/oY+iDr0bQtmtDDoRV8ndvGwCCYfYjEOraup
BapdU3KBioremzKB/FrV6+d1yUYD1wBv8ZWJXbVOayzfKKwoowIEmzg16/Sua/NduIbPZFxnJ9U/
bfdN1J+agRBGT2Y3pdBXpkQvzQPmrkO84cLGre25GyZ32eupx0meLjxp7Az8Np9/VqTQtmayroXO
G5bb+9uzCrpEEuQItcR4n1+I9Y7xGq1dfIZ8Zg==;
Date: Thu, 09 Apr 2026 17:35:02 +0000
To: doctor@nl2k.ab.ca
From: FinalNotice
Subject: Confirmation Needed
Content-Type: text/html; charset="UTF-8"
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam_score: 10.7
X-Spam_score_int: 107
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: CLICK HERE Unsubscribe 115 E 23rd St New York, NY, US 10010
Content analysis details: (10.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
[213.176.16.238 listed in dnsbl.ahbl.org]
[213.176.16.238 listed in dnsbl.ahbl.org]
[213.176.16.238 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.3 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
2.2 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only
Subject: {SPAM?} Confirmation Needed
CLICK HERE
Unsubscribe
115 E 23rd St New York, NY, US 10010
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 09 Apr 2026 12:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1wAuFr-000000008h8-2eUY
for dave@doctor.nl2k.ab.ca;
Thu, 09 Apr 2026 12:37:27 -0600
Resent-From: The Doctor
Resent-Date: Thu, 9 Apr 2026 12:37:27 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [213.176.16.238] (port=52191 helo=weslandbol.nl)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))
id 1wAtIO-000000004dJ-3mmC
for doctor@nl2k.ab.ca;
Thu, 09 Apr 2026 11:36:09 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;
h=Date:To:From:Subject:Content-Type:Mime-Version:Content-Transfer-Encoding; i=doctor@nl2k.ab.ca;
bh=O0bpsvYCJ5/7vzcUr3jc9dZYEXk=;
b=J5Igyo8iErRnjxwRzFS0yXwLTSfCiIm4gTO5teGX7vtZYKkztFdUtL1Tn8K89KqB6D5o9oG5/972
1IOoTyNn5DN8opFVqqwcyoqorzqUR4GVnLwqyqqA6mVUSTdD88NuG4N/0Rq2e6M8RNZMUJoAwLVU
i674KU6c7/81IVSfaP2rd3JcqdRioNmcCFt2jWcWhinJaVyTPdEORsCTglExH/jDfFcR7LNJJKoG
89pYWfEqGSv/nbZC0H++CFW99E7AqEqw9lIkhQOT+NsexQ6LoXxgyUESx6f7CwiMB+/RWOoMFy9p
SxDt9G8BlPiuohHtKSYil8X/LTKTAuq7feRjOA==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;
b=Zs23ahDnjqr+W17paNw6OREs+5XXuLOuwthJcuyL9IqCqNQEu9Qq77XQa9viOAoY/TJVAoR948lN
9ZetVIY7hkaDtbyLmmLhrmZSszz5Kh2oVkADmJ05/oY+iDr0bQtmtDDoRV8ndvGwCCYfYjEOraup
BapdU3KBioremzKB/FrV6+d1yUYD1wBv8ZWJXbVOayzfKKwoowIEmzg16/Sua/NduIbPZFxnJ9U/
bfdN1J+agRBGT2Y3pdBXpkQvzQPmrkO84cLGre25GyZ32eupx0meLjxp7Az8Np9/VqTQtmayroXO
G5bb+9uzCrpEEuQItcR4n1+I9Y7xGq1dfIZ8Zg==;
Date: Thu, 09 Apr 2026 17:35:02 +0000
To: doctor@nl2k.ab.ca
From: FinalNotice
Subject: Confirmation Needed
Content-Type: text/html; charset="UTF-8"
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam_score: 10.7
X-Spam_score_int: 107
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: CLICK HERE Unsubscribe 115 E 23rd St New York, NY, US 10010
Content analysis details: (10.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
[213.176.16.238 listed in dnsbl.ahbl.org]
[213.176.16.238 listed in dnsbl.ahbl.org]
[213.176.16.238 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.3 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
2.2 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only
Subject: {SPAM?} Confirmation Needed
Unsubscribe
115 E 23rd St New York, NY, US 10010