NetKnow Corporate Blog

Matsato Knife phish from Google Gmail

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU2m-00000000Aha-1TQY

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:48:12 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:48:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 228.228.189.35.bc.googleusercontent.com ([35.189.228.228]:56746 helo=googleusercontent.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNS9u-00000000PYm-3SGc

for doctor@nl2k.ca;

Sun, 01 Nov 2026 03:47:28 -0600

Received: by googleusercontent.com (Postfix, from userid 1000)

id 17AB64BA1; Sun, 1 Nov 2026 09:46:22 +0000 (UTC)

To: doctor@nl2k.ca

From:=?UTF-8?B?TWF0c2F0byBLaXRjaGVuIEV4cGVydHM=?=

Subject:=?UTF-8?B?VXBncmFkZSBZb3VyIEN1dGxlcnkg4oCTIE1hdHNhdG8gS25pZmUsIExhc2VyLVByZWNpc2lvbiBhdCA3MCAlIE9mZg==?=

MIME-Version: 1.0

Reply-To: =?UTF-8?B?cmVwbHk=?=

Content-Transfer-Encoding: base64

Content-Type: text/html; charset=utf-8

Message-Id: <20261101094622.17AB64BA1@googleusercontent.com>

Date: Sun, 1 Nov 2026 09:46:22 +0000 (UTC)

X-Spam_score: 13.4

X-Spam_score_int: 134

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: ï»¿ Get Your Knife Your current knife is costing you time

and precision.

Content analysis details: (13.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

[35.189.228.228 listed in dnsbl.ahbl.org]

[35.189.228.228 listed in dnsbl.ahbl.org]

[35.189.228.228 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[35.189.228.228 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.0 SPF_HELO_NEUTRAL SPF: HELO does not match SPF record (neutral)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.189.228.228 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 TVD_RCVD_IP Message was received from an IP address

3.0 RECEIVED_MULTICAST A multicast IP adress appears in Received header

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[35.189.228.228 listed in wl.mailspike.net]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible

phishing

1.0 HDRS_MISSP Misspaced headers

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?UTF-8?B?VXBncmFkZSBZb3VyIEN1dGxlcnkg4oCTIE1hdHNhdG8gS25pZmUsIExhc2VyLVByZWNpc2lvbiBhdCA3MCAlIE9mZg==?=

Get Your Knife

Your current knife is costing you time and precision.

A quality knife is the difference between frustration and efficiency in the kitchen. The right tool changes everything.

Stop Dealing With:

Dull blades that crush instead of slice

Poor balance that causes hand fatigue

Knives that rust or chip after minimal use

Why This Knife Works So Well

The Matsato Premium Chef Knife: Professional Results, Guaranteed

Built for serious home cooks who demand quality:

PRECISION CONTROL

Unique finger hole design gives you perfect balance and control

LASTING SHARPNESS

Ice-hardened stainless steel stays sharp 3x longer than standard knives

SOLID GRIP

Premium beech wood handle prevents slipping, even with wet hands

One knife. Multiple uses. Superior results every time.

Claim Your 70% Off Now!

All contents of this email should be considered as advertisement or promotion. If you decide you don't want to receive emails from us please click here to unsubscribe from these promotional emails.

UAB Convenity • Gedimino g. 45-7, LT-44239 Kaunas, Lithuania • +4932213260060

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU2a-00000000AgY-2HWp

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:48:00 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:48:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f197.google.com ([209.85.214.197]:41534)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNQxg-00000000GoU-02bZ

for doctor@nk.ca;

Sun, 01 Nov 2026 02:30:47 -0600

Received: by mail-pl1-f197.google.com with SMTP id d9443c01a7336-2eb238d8129so5405295ad.2

for ; Sun, 01 Nov 2026 01:29:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=santateresita-edu-pe.20260707.gappssmtp.com; s=20260707; t=1793521784; x=1794126584; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=J6U3pHZq2NI3ka8ojA5slbOfqGvM0cpGdB7Hkd7FZWQ=;

b=NBygq/UsOkbNIiKO2hOK7Lb7vWNyipb6vxJFs4uJbFlTSluludSPtvxFBES6SKXTVr

w+Tv34/oFmqQb1sZOnNPW8h2Wt5mEdR0z0+M5H3dSagThDixRfeRorzP2YMwfOEkfrPB

Rq0vd3RP7mWxJDykEIEmdBnDk5ZpX8dwIfUXtxsSdrf9PNc3wtdpkSOcwXvBNUo2OYOI

MjO9vslr4SOJke68rmmE/UN3V72MEaBzU6sdbs29tKNUbJ3VWSmPcXln+dI9agdN5A9Y

5lcW3modk4d5rXLqstFCUX4JGG+ols4EPTblBjOf82bKMQEdmSXkUd/ro/QohVt+1U0Y

FWOA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793521784; x=1794126584;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=J6U3pHZq2NI3ka8ojA5slbOfqGvM0cpGdB7Hkd7FZWQ=;

b=zz+w/0GDxygrrqWVolLlnNc0eiZ0lhtLkv+okuP70Y1YlfvuHdXg5Jt3Wz1peBT0jS

p0X9H3+NNZfJa7BwCvX0cqwktLmHZcLmpZX5T1SqmAeL+o4sr+ICzaR4rvrjZ/SKLwA/

QbGT1aIsLLSNDgpSXp/Ov6i75En269s9LstijgXU5nmHdj887q0mMj4j1Y38kj6+04eR

+NbBmc10hT3+0CMtTgK7HO94S1uzcaxLaDnNVMBRLrxvda3O5echaPnjqNLSOTs5Ov7q

XQF9CEA4cKAtDdQAfQe+iU2PgYixo0xD9XvbweBsZoQkDYoe5ZPmT0SE7uAGEa1azz/W

9Avg==

X-Gm-Message-State: AFq9FYKiDDnl7lKs/hY34plueXwLyMQKySvyTrhiEQxfV/PU/mnOiId8

rzDEFbkQX0gY6abmMP8yvc0J6dPd1LNQC5dzjLq3ACx9/dQPmoGLQ3roP+eg5QiGO4lAfTvpaiM

+G7dc+eKRZlXbI4ra3Dg/sTyS

MIME-Version: 1.0

X-Received: by 2002:a53:ac82:0:b0:67a:6bf9:e2c4 with SMTP id

956f58d0204a3-67ba4f6e22bmr10100204d50.4.1793521458714; Sun, 01 Nov 2026

01:24:18 -0700 (PDT)

Message-ID:

Date: Sun, 01 Nov 2026 08:24:18 +0000

Subject: Uw ANWB-beloning wacht op u

From: ANWB Klantenservice

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000071a928065f32c1ce"

--00000000000071a928065f32c1ce

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Beste ANWB-lid,

Wij voeren een kort klantenonderzoek uit en uw mening is waardevol voor ons.

Als dank voor het invullen maakt u kans op een handige Autokoelbox, ideaal

voor onderweg.

Vul de enquete in

Nog maar een beperkt aantal kortingscodes beschikbaar.

Met vriendelijke groet,

ANWB Klantenservice

Uitschrijven | Afmelden

--00000000000071a928065f32c1ce

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

lor:#222;padding:20px;line-height:1.6">

Beste ANWB-lid,

Wij voeren een kort klantenonderzoek uit en uw mening is waardevol voor =

ons.

Als dank voor het invullen maakt u kans op een handige Autokoelbox, idea=

al voor onderweg.

b6d8e7672d" style=3D"display:inline-block;padding:13px 26px;background:#f5a=

623;color:#fff;text-decoration:none;border-radius:5px;font-size:15px">Vul d=

e enquete in

Nog maar een beperkt aantal kortings=

codes beschikbaar.

Met vriendelijke groet,
ANWB Klantenservice

#eee;padding-top:12px">
e7672d" style=3D"color:#999">Uitschrijven |
an.com#t/p/48d055c162b6d8e7672d" style=3D"color:#999">Afmelden

ight=3D"1" alt=3D"">

--00000000000071a928065f32c1ce--

Matsato Knife phish from Google Gmail

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU2r-00000000Ai1-31dN

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:48:17 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:48:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 228.228.189.35.bc.googleusercontent.com ([35.189.228.228]:54618 helo=googleusercontent.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNSBB-00000000Pht-1SVf

for doctor@netknow.ca;

Sun, 01 Nov 2026 03:48:49 -0600

Received: by googleusercontent.com (Postfix, from userid 1000)

id 857E24DA1; Sun, 1 Nov 2026 09:47:21 +0000 (UTC)

To: doctor@netknow.ca

From:=?UTF-8?B?TWF0c2F0byBLaXRjaGVuIEV4cGVydHM=?=

Subject:=?UTF-8?B?VXBncmFkZSBZb3VyIEN1dGxlcnkg4oCTIE1hdHNhdG8gS25pZmUsIExhc2VyLVByZWNpc2lvbiBhdCA3MCAlIE9mZg==?=

MIME-Version: 1.0

Reply-To: =?UTF-8?B?cmVwbHk=?=

Content-Transfer-Encoding: base64

Content-Type: text/html; charset=utf-8

Message-Id: <20261101094721.857E24DA1@googleusercontent.com>

Date: Sun, 1 Nov 2026 09:47:21 +0000 (UTC)

X-Spam_score: 13.4

X-Spam_score_int: 134

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: ï»¿ Get Your Knife Your current knife is costing you time

and precision.

Content analysis details: (13.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[35.189.228.228 listed in bb.barracudacentral.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

[35.189.228.228 listed in dnsbl.ahbl.org]

[35.189.228.228 listed in dnsbl.ahbl.org]

[35.189.228.228 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.0 SPF_HELO_NEUTRAL SPF: HELO does not match SPF record (neutral)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 TVD_RCVD_IP Message was received from an IP address

3.0 RECEIVED_MULTICAST A multicast IP adress appears in Received header

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.189.228.228 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[35.189.228.228 listed in wl.mailspike.net]

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible

phishing

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

1.0 HDRS_MISSP Misspaced headers

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?UTF-8?B?VXBncmFkZSBZb3VyIEN1dGxlcnkg4oCTIE1hdHNhdG8gS25pZmUsIExhc2VyLVByZWNpc2lvbiBhdCA3MCAlIE9mZg==?=

Get Your Knife

Your current knife is costing you time and precision.

A quality knife is the difference between frustration and efficiency in the kitchen. The right tool changes everything.

Stop Dealing With:

Dull blades that crush instead of slice

Poor balance that causes hand fatigue

Knives that rust or chip after minimal use

Why This Knife Works So Well

The Matsato Premium Chef Knife: Professional Results, Guaranteed

Built for serious home cooks who demand quality:

PRECISION CONTROL

Unique finger hole design gives you perfect balance and control

LASTING SHARPNESS

Ice-hardened stainless steel stays sharp 3x longer than standard knives

SOLID GRIP

Premium beech wood handle prevents slipping, even with wet hands

One knife. Multiple uses. Superior results every time.

Claim Your 70% Off Now!

All contents of this email should be considered as advertisement or promotion. If you decide you don't want to receive emails from us please click here to unsubscribe from these promotional emails.

UAB Convenity • Gedimino g. 45-7, LT-44239 Kaunas, Lithuania • +4932213260060

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:48:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU2S-00000000AfW-06kZ

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:47:52 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:47:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f70.google.com ([209.85.218.70]:44266)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNQAi-00000000CG7-0vHY

for sales@nk.ca;

Sun, 01 Nov 2026 01:40:12 -0600

Received: by mail-ej1-f70.google.com with SMTP id a640c23a62f3a-c3f88d2ff28sf175920566b.0

for ; Sun, 01 Nov 2026 00:39:14 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1793518747; cv=pass;

d=google.com; s=arc-20260327;

b=bzLYWwSxoxVJJo+FnVQ9mTHb6g1WHQSTdXfFf2I/RVDegc6423dhXqoDI8bnhYpPOg

wNrkVv8xd3RuFdwRksPKKziz4afl+VfqbeNgYUOmMWQ6J6oAeJM8KuY6qFIeV0E/dmXs

WX7mu4avPFcVANGcehC1R0muCgRnD1vgeNL7je/i2FfbTOSO+lNt1RwY9WrZ55/ak1kA

21sifvbEjpU6g7VuswKLf3TGsXnb/JDKoknfdrZknfRs0EBUoTeJWYgJGEtpq3iPTUVX

iOIzbE2gS+23i4EuxJZNsVagggUfif9fHpKkLM2NGWlUcOm1izHwCeBgeUOEeKd3G+xS

YlIA==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:in-reply-to:references:mime-version:dkim-signature;

bh=+pdsTmz2KNSA4U1RAz193/n/8YxvGK12TI6C7j/Nftk=;

fh=NiLNQGRU7ONmg/kZZbmPOGI7idCAeE5BQR3CcXwtz+M=;

b=Dsqq2E+Kt4rQ8Ap3zh/hFnjjH7ahSMCcvgcAV5FWtS6yUtFyY+Lod3w2Q6h7S5Op9x

hdFwOBCBc6pmVnWcvf6eWHs8UvPhO42L414fpOEC5YW2emYDjPH6ngc8Gf8lIChhlNJs

45WIBHh8RC9kmJu+HUIg6XCD2HKi21bRLbUdGIR+9Ps3lG+O2uju34KlxKxOszFED7mc

qabkNzF4BaBa+y/HPmB3tEhfIdTxDnZYxnfR30Y5vwbaj4nTXFlHEQZhcaCGlbu4WaL6

k3zRo5R1g6clzn2UzOpoOg7eq6kXpGoPEKQxR+uTpirRPcJnY9vanRGv0/Dovycqmxyr

vPtA==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20260707 header.b=jws1C0FI;

arc=pass (i=1);

spf=pass (google.com: domain of olivia58433smith5954@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=olivia58433smith5954@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@vtlrsources.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vtlrsources-com.20260707.gappssmtp.com; s=20260707; t=1793518747; x=1794123547; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:in-reply-to:references:mime-version:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=+pdsTmz2KNSA4U1RAz193/n/8YxvGK12TI6C7j/Nftk=;

b=NtRoqWYCE1qXrQqCc2RKpyXwgU7BqO4oblsUObtt/vNXwNpLKQdzHNOpunIPwz6hbC

wwsrPXSaDg97ZipZEmkfVgC+Y2PgTl3z45AQeV9LxeaslIPGblleZBnzbv05FPjbJ4Q9

pRE8y6wR67Uk2xPGjFGjrlHtp/FlzWPa5F6TaCC87BEyTJd/HmqrA84IcaVQlv8Jws93

OHYK4AdTi5hrSDEqZddlS3hpZVC7XG10QtQKDSlQWeBJKaKJsyGh+aWCvMWCLRmBiHvI

UZzvWa2AdnisJJlGa7mTNc58OQ0pviN5/0BVJzbcCDR4OCP4hc8qTLQ+CdePCUydM6ea

yVjg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793518747; x=1794123547;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-beenthere:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=+pdsTmz2KNSA4U1RAz193/n/8YxvGK12TI6C7j/Nftk=;

b=f9JxLCNNMYQaiddzVsOGPaOazBa3xblaUg9+nVtkBv/3v3f6voM38dndEwEfXJFUDV

vK1zsSmoX1ym/txSJN5YHjHXCErYRTfvlCK9Is8IFbqJNH+MO6lx3E8q+fhCeQt/+kCJ

U+QTCwQWPTVPWZ216Dgk3i+CGcXjKzQ0tBL5E1urdvvzlZeiAubOqTZOLQzR9REJu1X6

gQo2XwK/FKG8mt9evZNvdB3JThXVGGUBoNrZ7YEJw3K36xi74vUxxPo3el8scrkv5Ioo

7cu6LRqqFyt7lmyEDRrddMICZaGZq68QL4TC/zdh6UKQuxufhdrKRimIZNfhlQUeT9tA

YJ0g==

X-Forwarded-Encrypted: i=3; AKwUvBzWPhlACJa/mwu0bwEWrwP7Bcd8CxUxzwAuSgN3UtIgLYudnN1ML65BWoaqOQoFwM8hb66llQ==@nk.ca

X-Gm-Message-State: AFq9FYJKASOp+Ji1WiYsBF7KhjVm1U9k9xqiNzFQg3L2Jq8prXNoPrhx

jNbRK463OW0WynA3r2jnVUgMw7ooibII7YlV2ZFFEjYqHdmUBL4wWf+aB1+MewoMYFI=

X-Received: by 2002:a17:906:f582:b0:c34:e9fe:82ed with SMTP id a640c23a62f3a-c4ca7aac4f0mr575714466b.28.1793518747188;

Sun, 01 Nov 2026 00:39:07 -0700 (PDT)

X-BeenThere: oliviaq2@vtlrsources.com; h="ATskLdeOBz4WloJA/bb62d+PHV+wfAn/U4JW7yHnqwBMesAKvQ=="

Received: by 2002:a05:6402:4515:b0:6a9:bb2a:c005 with SMTP id

4fb4d7f45d1cf-6b4d13bde5fls4115080a12.1.-pod-prod-01-eu; Sun, 01 Nov 2026

00:38:48 -0700 (PDT)

X-Forwarded-Encrypted: i=3; AKwUvBwFXGjTeFxdhf9ibYgyDW0lr4zroOHY8EnfmgNYJqPWTA6HfwoxuOM0sv5mHXS6fE1Fs4J8u/r5cQ==@vtlrsources.com

X-Received: by 2002:a17:907:7b8b:b0:c29:f5d8:9c73 with SMTP id a640c23a62f3a-c4ca7ab30b1mr551454666b.34.1793518727620;

Sun, 01 Nov 2026 00:38:47 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1793518727; cv=pass;

d=google.com; s=arc-20260327;

b=Agt8ENrnjQJOQ8vlYKqBvCxR2CQf0odJXw1cnCUVPPceJCzKKcXKZQT6epri5ojAyk

A12LnqOt1pYrt9C0hwZHzuY++KO+9tqezY3JCqzYxRhjMTXE3UZ/1DrpjBuAKFQOiJ5f

9ncAYUSrf57YJWXG6wVPqbf9atfqaqUadu0SGmjTipLt2aSzWGXwsHKnSeFExlfYa7+d

qkq3dn1V4dRpgytIiZxohkt6D498ubX40zS4nPTByZTBFFYE82whT0D0/g9m0jJnRw7a

lZv4cBgGLJorFiOKnr6VcaMZNrIPwRKkYGKDc2pcTq/K+6zfMO9qWGfbR7NetmrlhAOt

+Zjg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=nj3A3dTvr/5a5ADdBDIpsVcan7pro9kQdUl/wqnqHZA=;

fh=PENgZmje1XTRSkEkzBro2PUiU8JGYwHhAff3UV6uxaw=;

b=X7ZrlBtmbwM6iyPM2h1ufoAbXSCZ2uml+yEVMj9nLGEbO6EsHtf8Hj4CnJF7FVWaxh

+E2L1aVELUTKHMgtWwsIPefrnWwmKwu9qz7N0PEVJ01kwJk07BchNj6jW3ggGv7ddW+o

P1yb89lbRN868hyO77KjAU7M24RVxPix1mxSLVmKNNvv/BhCKWSAgXxuLz/bKEOq1DzF

oHCaMmb+7zCQD3szmBTBNuJCSiFUPlXVoswjiPVwqWglHmes8R/aZPn7uTVqvsOTXiVL

2WkczFM6kSQKOCzhf3Hu+O/u2yjuI2aJaSyW+oXUnOZxPXYHImJ0MFMCaCAjqXL4g/WC

qJ+A==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20260707 header.b=jws1C0FI;

arc=pass (i=1);

spf=pass (google.com: domain of olivia58433smith5954@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=olivia58433smith5954@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@vtlrsources.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 4fb4d7f45d1cf-6b4db8fcf8esor1504828a12.5.2026.11.01.00.38.47

for

(Google Transport Security);

Sun, 01 Nov 2026 00:38:47 -0700 (PDT)

Received-SPF: pass (google.com: domain of olivia58433smith5954@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1793518727; cv=none;

d=google.com; s=arc-20260327;

b=F+53Ev4ex46cGB5ORe2aEGijVyH9Bqhn1PX53e6NxTtzPKeKWCzIlKg04Y81a+nICJ

HkI9/GX43ybnmmassolvEaLfLSe4Sl+5UVPhyBuXtigMBoJXqGneE+qiJJ4xtpvnlZe0

i8iCVqb3BZ75I19fKhEHYAwHJUx2HwLnwgcJRURqywXDCSqR4SWzuMol7XQoGzMWKM1A

/RCmsWOag+b3snIVeDQvAHMCVyn6WT8AsNiPVRdacS1JLe7l8QBiCfR2aVMlrX8gl7kX

KYrl1tyZ/SG/frOTNzO5CEZcjg6v0NwPYuvc8g8Ig18n9dCDrtUc80lI2+9+GwdxdbNQ

QDWQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=nj3A3dTvr/5a5ADdBDIpsVcan7pro9kQdUl/wqnqHZA=;

fh=PENgZmje1XTRSkEkzBro2PUiU8JGYwHhAff3UV6uxaw=;

b=PWXlJlrnq9jWKnzmdmegpmFqbCUZe7lwz6TJ4XJ+Zb6wKpLC3I+/RDV7zcoDtaRGQs

VtBgzL8Sn1uyMZ/KeEGGFYON2I2EAG+DJdZZ9GtE8DMsEonu+3Zd+6GtVu/7sanOM0NT

x0dVken1C6S2kH70xGjaVKPYU+DR4PLwoX9eLOqyXkwaSMkJaDahM1h8DSrxi2R2rlr6

y37D+vsmGEtkVVJlFcw+zLDuSmszqFAD9GW98HKeCbm3hsD1w1s1ERRq7Gaq6FPQN43E

eW93aF8SErqINKGmDE6SAjYbnvRxlyI5+MqjPugIEizpndwR7NEDAMoB4/6cq4zsa3Ee

UrXQ==;

darn=vtlrsources.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Forwarded-Encrypted: i=1; AKwUvByyTshRYEi3OBHPHtV5yhbjpzNYiqdRsWe3/aP6LFR2QSKwqa+cPmmz3XNOBHqyvLNGMZ0iWQdtqw==@vtlrsources.com

X-Gm-Gg: AYBFou3Y9WCpRD/Z9TQzo33TuAsNzNKK6hhLi6BX7Nqg9zu527rBP7/XQY7kpRDZ7cU

V1d3GqtcDO48TaDmlXlP9Z2vMzshKsX6jrRX+a6z4Rdz0Nq4Pt9dO83tlv7aXs/zpsQzhoO1ZZI

HEV5v4J/v8E/yc6yrHU9rCRf/Ssw+3FmJOJmytzs98PSyxfeha9v7VbJIdno119uv0//z/jHNe7

pwo1/pb9uVktx7S6DnzMpOWFutSE/x1/7I97JzuEuADYFKERU8M11HWfxfquoIfLtrKrPU+yoEq

qD/ZyDnjxjB5VskIvwN7NEAv6CY17mZg8z8pWzRW4LLDzlW4dACLoZb3/0pf159CNajdyP87q1v

vEFcYR1UdT7T5uX/9QcKowUfQL30PNO/4IJZrBhnT6td0SrSTgVR6mdhnwQCy4ZQxQmuRppdfK7

gfAq8c/KNPiFPXdInM+rD9I3c8Jj+weR5BvLXhzTiTL0IVfiw3B3QAw9Xe1XjbbBRCatkfFIsM6

pOi5vUp9t1n

X-Received: by 2002:a05:6402:c9:b0:6b4:7b28:858b with SMTP id

4fb4d7f45d1cf-6b4d468a69amr3717862a12.19.1793518727070; Sun, 01 Nov 2026

00:38:47 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Olivia Smith

Date: Sun, 1 Nov 2026 13:08:35 +0530

X-Gm-Features: AclHuK-FhlA3nB1ELueyfg-eQfAyj9OwUhGvHKXwTRYClpswBft-1qRDpCOmsiA

Message-ID:

Subject: Re: Business App Development

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a00a1f065f321e2f"

Bcc: oliviaq2@vtlrsources.com

X-Original-Sender: olivia58433smith5954@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20260707 header.b=jws1C0FI; arc=pass

(i=1); spf=pass (google.com: domain of olivia58433smith5954@gmail.com

designates 209.85.220.41 as permitted sender) smtp.mailfrom=olivia58433smith5954@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@vtlrsources.com

Precedence: list

Mailing-list: list Oliviaq2@vtlrsources.com; contact Oliviaq2+owners@vtlrsources.com

List-ID:

X-Spam-Checked-In-Group: Oliviaq2@vtlrsources.com

X-Google-Group-Id: 192315971599

List-Post: ,

List-Help: ,

List-Archive:

List-Subscribe: ,

List-Unsubscribe: ,

--000000000000a00a1f065f321e2f

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello,

Just a quick reminder about the our last sent mail

We are really looking forward to receive your answer so that we can get to

any final conclusion.

Thanks,

Olivia

On Fri, Oct 30, 2026 at 11:39=E2=80=AFPM Olivia Smith <

olivia58433smith5954@gmail.com> wrote:

> Hi,

>

> Interested in developing your mobile apps or software?

>

> We specialize in:

>

> Food Delivery, Restaurant, Health & Wellness, Enterprise Mobility, Taxi,

> Travel, Logistics, Accessibility, Business Apps, and more.

> Please let me know if you're interested, so I can share work samples,

> project details, and pricing information.

>

> Looking forward to connecting with you.

> Thanks!

>

To unsubscribe from this group and stop receiving emails from it, send an e=

mail to Oliviaq2+unsubscribe@vtlrsources.com.

--000000000000a00a1f065f321e2f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello,

Just a quick reminder about=

the our last sent mail
We are really looking forward to receive your an=

swer so that we can get to any final conclusion.

Thanks,

Olivia=

=C2=A0

class=3D"gmail_attr">On Fri, Oct 30, 2026 at 11:39=E2=80=AFPM Olivia Smith=

<olivia58433smith5954=

@gmail.com> wrote:

=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding=

-left:1ex">
Hi,

Interested in developing your mobil=

e apps or software?

We specialize in:

Food Delivery, Restaura=

nt, Health & Wellness, Enterprise Mobility, Taxi, Travel, Logistics, Ac=

cessibility, Business Apps, and more.
Please let me know if you're i=

nterested, so I can share work samples, project details, and pricing inform=

ation.

Looking forward to connecting with you.
Thanks!

To unsubscribe from this group and stop receiving emails from it, send an e=

mail to Oliviaq2+un=

subscribe@vtlrsources.com.

--000000000000a00a1f065f321e2f--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU2J-00000000Adm-16LC

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:47:43 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:47:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f197.google.com ([209.85.128.197]:60455)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <3VuTmahMNBhk8JA7zCz.Bz16z2D.PPTz1z2.EJ1GH.0G2D1IDGC9.1z@maestro.bounces.google.com>)

id 1xNPcZ-000000008mI-0aDO

for doctor@nk.ca;

Sun, 01 Nov 2026 01:04:53 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-8b2d1b27544so9226717b3.0

for ; Sun, 01 Nov 2026 00:03:57 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=acad-pucrs-br.20260707.gappssmtp.com; s=20260707; t=1793516631; x=1794121431; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=D3qPkN99i7zQP4vJjZb9sF7rXTi4/cCMDk64XKhcftY=;

b=sCHBVAKROAAfCAtPATHx8mk00baT+vtsNlrNk5xMn3PMWevReiORxiaa1wayCAc5Zz

vhsqVEwl4q/25ZuyNpgdVK4GwCPzR3mEgleHMQEzgihwkNRWikZ7ppniq5L7giaEjMDa

lRxAfMVTP6YJ9NkPVowOWeG8i3GQJWGkIn8FUpxLsHqsg3BT5citi237LHJ3PDr8RFxi

b2SiTn1jtK+NiAMkJa0EeJmKejBx45hffPH0n3Dfmny5rpToRiU5IDj1Pz/PbGdag5jC

MVKmqIoYYqIepVw/uZ811Pc8tpU64Bx6QJPPm3Rnm5FEYu5uZ1JT5wIjWka82VnQODsv

+BjA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793516631; x=1794121431;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=D3qPkN99i7zQP4vJjZb9sF7rXTi4/cCMDk64XKhcftY=;

b=G/eUHH21m9/cV9a0XFVCiBx+TTpkF7ElrKNn6KQCXzUlhod/SWfcPO0QjDdHuRMAt8

yl0Cp5oVad8SVthj9tlJ31CNbhvq4a7M7/CFV24MIiwe1KZ/PfKTUcYZJQvw2W9WDpmB

q+AIQtQ6ytRSLlRXKCagWipmJZkPFPH2Fvc/zArpJ8VGPvVwWCAHrt7fiuh5DXxZMW6d

THZo+7aOkyXQQIwLBNsiqH8C/5KHVMChnaAQ+hSt8208SkGC054IDjJqQ1pIBMtaRfmF

OKHb2rcZIelqhLDvzTKdHcQOVXMTsJKjBm8teRcYLyvo7m+FJFPMeTaVaGaWCiH/CQlR

eZIw==

X-Gm-Message-State: APuU4Z/3V9T4lpWj4d4sbPMdc7qrmbRl0WXkRveikF4243+Y0XkKeMzN

R8sLV5QmR/HuIHlZtbDFE1TNT+ch4ypngaCS/e50N4lb0R3nEsqYIG3VgtJsBoJeiCSxpwm0o3C

JLSv7mM+FtJ2YoMSs/vcu/wM=

MIME-Version: 1.0

X-Received: by 2002:a05:690c:4:b0:8b0:f0f6:1476 with SMTP id

00721157ae682-8b2b65af757mr40600137b3.15.1793516630862; Sun, 01 Nov 2026

00:03:50 -0700 (PDT)

Message-ID:

Date: Sun, 01 Nov 2026 07:03:50 +0000

Subject: Laadpaal bij u thuis of op het werk? Helemaal niet duur!

From: Lucas van Dijk

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000ae802f065f31a106"

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hallo, Rijdt u elektrisch of overweegt u de overstap? Dan

is een eigen laadpaal bijna onmisbaar. U laadt 's nachts op aan het goedkoopste

tarief en vertrekt elke ochtend met een volle accu. Benieuwd wat een laadpaal

bij u thuis kost?

Content analysis details: (5.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_JS BODY: Odd Letter Triples with JS

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.197 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.197 listed in bl.score.senderscore.com]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.3 PLING_QUERY Subject has exclamation mark and question mark

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.197 listed in list.dnswl.org]

Subject: {SPAM?} Laadpaal bij u thuis of op het werk? Helemaal niet duur!

--000000000000ae802f065f31a106

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Hallo,

Rijdt u elektrisch of overweegt u de overstap? Dan is een eigen laadpaal

bijna onmisbaar. U laadt 's nachts op aan het goedkoopste tarief en

vertrekt elke ochtend met een volle accu.

Benieuwd wat een laadpaal bij u thuis kost?

Vraag een prijsopgave aan

Groeten,

Lucas

Uitschrijven | Afmelden

--000000000000ae802f065f31a106

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

lor:#222;padding:20px;line-height:1.6">

Hallo,

Rijdt u elektrisch of overweegt u de overstap? Dan is een eigen laadpaal=

bijna onmisbaar. U laadt 's nachts op aan het goedkoopste tarief en vertre=

kt elke ochtend met een volle accu.

Benieuwd wat een laadpaal bij u thuis kost?

7700202eed" style=3D"display:inline-block;padding:13px 26px;background:#264=

653;color:#fff;text-decoration:none;border-radius:5px;font-size:15px">Vraag=

een prijsopgave aan

Groeten,
Lucas

#eee;padding-top:12px">
202eed" style=3D"color:#999">Uitschrijven |
jn.com#t/p/3c4f9813667700202eed" style=3D"color:#999">Afmelden

ight=3D"1" alt=3D"">

--000000000000ae802f065f31a106--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU2D-00000000AdF-3q4W

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:47:37 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:47:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f69.google.com ([209.85.216.69]:55553)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNPPf-000000007Rj-0Pua

for doctor@nk.ca;

Sun, 01 Nov 2026 00:51:32 -0600

Received: by mail-pj1-f69.google.com with SMTP id 98e67ed59e1d1-3adc5b185bfso2210449a91.3

for ; Sat, 31 Oct 2026 23:50:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=students.unnes.ac.id; s=google; t=1793515831; x=1794120631; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=5JsSuV1UkJopNmknez4in1tOI/WHTJtrJcRf6fGRd8Q=;

b=zjv/o3v/siaBb1X7GLidK6vRGjjgQ3wIn7lZFD6Kl0KBMAYuTGIllgaFlqKnyLP8rM

IxVQS4qAVoNoDK87qol7xqNKoZjfSWNi6T/+RE1fb8Vsj8ZSQhiHoRksn+g9dK+NqfMu

C7tXPipenbcpSbl3ZW1b5P5bpIXtVMFb4mXaK2f9PP0t84TFespI/JeUcVM1m5c+S0MQ

cLZP+zlwSc7zvuuDxTfVaDY8yKog0XoR2UJ/ZeSImbNrz6+0EUZe+AJqyda0WI9n9bEr

eCZfNTkmmsyn60AKhNx+SZ0OL80x1Ht39Nf8G4WFuMl4qF1zfdcVxYmwazIuyuL1q1pN

r9aQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793515831; x=1794120631;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=5JsSuV1UkJopNmknez4in1tOI/WHTJtrJcRf6fGRd8Q=;

b=v4Fufi6qhnmYOyS4NQTgpysibi6FPCreWmLXiFWztLRdl5QgAMYQjGZKjxWS24LJDZ

29v8Ixl4JNPD2i0jg2pf2+JFAKha4uNhXZ2NJ1dAx/x0oRsETZru/f60Dn3+Jd65Ao7g

EcYu2IFae06BPK6ji+POmBHDjvi/P3oGB5eMXqXmPfGFD1/ZQFf2sW8jM6iD55Gk3dx9

IkC32XptzNWxcwVwf/oMrHqAyAHlqtXUXVVlMQhRRWx66kM2WmEndKozfUmChqtn9AQ7

lmidPnWXTJxP/B5mvzeJmJBVCEl2Oe3Flb2sb4ctrsTDL7XIVbo8myR1zgr/Gux5P5H2

ar+A==

X-Gm-Message-State: APuU4Z/9rNIiXMEmlH0DlSjneNfJ8XsOBwSTTghMTe0LS0SJvflMcYvv

oPsnBf0CxLGu3Ztvn2PGvZGwk4404Ts+598IXjce2ySYYOl6O5a6IMYowzCHIB/QDrn5BkNeWjm

7fivArTifxnv696ENJwmZNA80riCbueLPHX6Q40NZFXTktH2sgOUaIVgRzicc8fjxK9iMpcg=

MIME-Version: 1.0

X-Received: by 2002:a05:690e:2047:b0:679:935e:3543 with SMTP id

956f58d0204a3-67ba4c88337mr3235330d50.1.1793515424304; Sat, 31 Oct 2026

23:43:44 -0700 (PDT)

Message-ID:

Date: Sun, 01 Nov 2026 06:43:44 +0000

Subject: Uw oude bed is tot 1.500 euro waard

From: Somnora Inruilactie

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000c3e128065f3159a4"

--000000000000c3e128065f3159a4

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Beste lezer,

Slaapt u al langer dan 8 jaar op hetzelfde matras? Dan is de kans groot dat

uw slaapkwaliteit eronder lijdt.

Bij Somnora kunt u uw oude bed inruilen en ontvangt u tot 1.500 euro

korting op een nieuw slaapsysteem. Inclusief 180 nachten slaapgarantie.

Bereken uw inruilwaarde

Vrijblijvend en binnen 1 minuut.

Hartelijke groet,

Somnora

Uitschrijven | Afmelden

--

---------------------------------------

DISCLAIMER

---------------------------------------

This email may contain

confidential or copyrighted information of UNNES. If you are not the

intended recipient, please do not use or share this email. If received in

error, please notify the sender and delete it. Check for viruses; UNNES is

not liable for virus-related damages.

---------------------------------------

--000000000000c3e128065f3159a4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

:#333;padding:20px;line-height:1.7">

Beste lezer,

Slaapt u al langer dan 8 jaar op hetzelfde matras? Dan is de kans groot =

dat uw slaapkwaliteit eronder lijdt.

Bij Somnora kunt u uw oude bed inruilen en ontvangt u tot 1.500 euro kor=

ting op een nieuw slaapsysteem. Inclusief 180 nachten slaapgarantie.

31ca0096d3" style=3D"display:inline-block;padding:13px 26px;background:#5c4=

d7d;color:#fff;text-decoration:none;border-radius:5px;font-size:15px;font-f=

amily:Arial,sans-serif">Bereken uw inruilwaarde

Vrijblijvend en binnen 1 minuut.

Hartelijke groet,
Somnora

#eee;padding-top:12px">
0096d3" style=3D"color:#999">Uitschrijven |
jn.com#t/p/3e5767d00131ca0096d3" style=3D"color:#999">Afmelden

ight=3D"1" alt=3D"">

------------------------------<=

wbr>---------

DISCLAIMER

e=3D"text-align:left">

------------------------------=

---------

This email may contain =

confidential or copyrighted information of UNNES. If you are not the intend=

ed recipient, please do not use or share this email. If received in error, =

please notify the sender and delete it. Check for viruses; UNNES is not lia=

ble for virus-related damages.

---=

------------------------------------

--000000000000c3e128065f3159a4--

Stonehaven AV phish

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 12:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNaE4-000000006Bd-2dI2

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 12:24:16 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 12:24:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [130.49.219.81] (port=42445 helo=stonehaven.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNWi9-00000000OJD-0DeE

for root@mail.nl2k.ab.ca;

Sun, 01 Nov 2026 08:39:07 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=stonehaven.com;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@stonehaven.com;

bh=iXszQIlxx7vPex2rmYIgCydLtyk=;

b=EgsNrHJ7EXXDGRUj33FcrlfmRIRgVHbATZh0r26HhLc04x6k0QrwNROeydlBNLOKmQZzVAk4tEAT

z0LR9BgOybq67kpfgFrQ/HacsOzGYf3OtRqpAcWKHpsxLd+agjSajGuYyWdi9hRdqWd80ibcU62r

Ht89Wb0EH+CyCxY587A=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=stonehaven.com;

b=b+BI2KJbpDh/XLIidg188JOqCbU0rrI7OnRj7TxOvhzaUKYU2DxGPJzKs5TwA2PcgQ6abb5dCRjS

4v6s7kZ7Tr/EPA3424F5amHu/s/N5KUpXtg1T4rOHpTTPBltMO7d5pXVjxRJN8KK4tPUPF7vlabk

FGMcpkBTFDlupgStvvU=;

Date: 11-01-2026

From: Antivirus Alerts

To: root@mail.nl2k.ab.ca

Cc: root@mail.nl2k.ab.ca

Subject: Confirm your Antivirus Renewal

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100218cbff5f80e-351cfa4d-48ec-4861-b2h8-6fbb151cmf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Keep your Devices Safe Now

Content analysis details: (14.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

3.5 VIRUS_WARNING62 'From' indicates unhelpful 'virus warning' (62)

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[130.49.219.81 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.49.219.81 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

Subject: {SPAM?} Confirm your Antivirus Renewal

Keep your Devices Safe Now

style="width:100%; height:auto; max-width:593px;"

border="0" usemap="#wxj8">

style="width:100%; height:auto; max-width:500px;"

border="0" usemap="#aZx4">

Stonehaven AV phish

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 12:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNaDw-000000006Aj-3AOy

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 12:24:08 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 12:24:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [130.49.219.81] (port=43415 helo=stonehaven.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNWi9-00000000OLM-0Dh3

for root@nl2k.ab.ca;

Sun, 01 Nov 2026 08:39:07 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=stonehaven.com;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@stonehaven.com;

bh=qIqmGmx92DeVxhrYphHk7+VopBI=;

b=wR1zT96SZBfwNWykioxv1rCbnllTMeVETYGk2srJgSewmwQRLn+PBaDECD9Bazwsv3y3wupEdTFQ

a9MrXkWwfFC4aljLtmsD8o78MMtqfogMlqXkbii1fffmn+ChlqyNuBroxriwpzGfBnNEkG92OYEk

K/OZWTJ88XYEtVQtLUk=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=stonehaven.com;

b=BiwOzsk97NwsBRAwIBRlxefwOdvEJ9P/xTqE8GAv3ehuL2q9meoeOFUQpzPfvqvjviNpcplNWhvj

V2O/Pa00XP6u5Ef+zTjdbUB3KRU0SJO99H7AV7CCL/6bcQWgFZKzLIMLvItoyENw2OdEM8M96CnK

+ByEFIrukMudDnap/S0=;

Date: 11-01-2026

From: Antivirus Alerts

To: root@nl2k.ab.ca

Cc: root@nl2k.ab.ca

Subject: Confirm your Antivirus Renewal

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100218cbff5f80e-351cfa4d-48ec-4861-b2h8-6fbb151cmf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Keep your Devices Safe Now

Content analysis details: (14.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

3.5 VIRUS_WARNING62 'From' indicates unhelpful 'virus warning' (62)

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[130.49.219.81 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.49.219.81 listed in bl.score.senderscore.com]

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

Subject: {SPAM?} Confirm your Antivirus Renewal

Keep your Devices Safe Now

style="width:100%; height:auto; max-width:593px;"

border="0" usemap="#wxj8">

style="width:100%; height:auto; max-width:500px;"

border="0" usemap="#aZx4">

Stonehaven AV Phish

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 12:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNaDp-0000000069Z-0Utb

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 12:24:01 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 12:24:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [130.49.219.81] (port=43415 helo=stonehaven.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNWiM-00000000OLM-3sHz

for games@nl2k.ab.ca;

Sun, 01 Nov 2026 08:39:13 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=stonehaven.com;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@stonehaven.com;

bh=5fhOjgu8SZvFvDzTU+A/PGXTuo0=;

b=TAAgRZfOdaDWuOHOy+9UTuYlHdw6uBCipeMr+2yNVClCyMWJcxlrUDVN7VIrJHGjwtqNan5bMQPi

miRoTyNAym1ej6qvw6YHFX9wO9bItJVbvO0gSG4KvRJyEfa0Pte/+8cOrmQPDx1alEelmFuKMpvZ

qVgVXQni3yq/vI9gzQs=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=stonehaven.com;

b=AbmGf4KHC4ImjoYav2JgRHA4hVGHyqwDceiDR4v6zed3F05t3LNciYVOOmc2n6ppK8SxRNMu1E7F

EWcl184gdCkoFxM2UeIo3JLr17aBdt4RYDRj0WyDoMqUWgR3dtYnsiY0/XQTRVgIaXbOSAEeUsM7

YQR7CTLyCxkYdUgiy9g=;

Date: 11-01-2026

From: Antivirus Alerts

To: games@nl2k.ab.ca

Cc: games@nl2k.ab.ca

Subject: Confirm your Antivirus Renewal

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100218cbff5f80e-351cfa4d-48ec-4861-b2h8-6fbb151cmf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Keep your Devices Safe Now

Content analysis details: (14.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[130.49.219.81 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.49.219.81 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

3.5 VIRUS_WARNING62 'From' indicates unhelpful 'virus warning' (62)

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Confirm your Antivirus Renewal

Keep your Devices Safe Now

style="width:100%; height:auto; max-width:593px;"

border="0" usemap="#wxj8">

style="width:100%; height:auto; max-width:500px;"

border="0" usemap="#aZx4">

Stonehaven AV Phish

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 12:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNaDt-000000006A3-0CsX

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 12:24:05 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 12:24:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [130.49.219.81] (port=50047 helo=stonehaven.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNWi9-00000000OLN-0DbC

for support@nk.ca;

Sun, 01 Nov 2026 08:39:11 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=stonehaven.com;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@stonehaven.com;

bh=goU/QNY2yv3pX6S6njgsQ23bU10=;

b=NdmeDBlZyUO0CYSq82AHaPo+VtKCvy75GAvjeVDL7cqc4WUx4FJhQEFqWC5V/BKWYCqZ2qT3X/ir

deDGy4fJv4KfoI6YtvWOSZReq1gbryrzLNxdGnJe+W3TmOXC508DjVN1vhKup1TGLPn200BsSuyH

lLId6uqz3IVUYFYIOAA=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=stonehaven.com;

b=YUPPsFWVCYnbSoCYSe2tODq35ZcKtzoSws0ui6B3Dyac5xGt/AMd8wcRIB8c/nNsib6Ng58aBDQE

4YEtMjWz0atZqwaYnzwguKLjMqyx3nvWqsKHOwVLetK5A8llq9Ncu33YzTQzGAhGYdAcQfBgGg3P

xFt4WCi93rI+7x2OF9c=;

Date: 11-01-2026

From: Antivirus Alerts

To: support@nk.ca

Cc: support@nk.ca

Subject: Confirm your Antivirus Renewal

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100218cbff5f80e-351cfa4d-48ec-4861-b2h8-6fbb151cmf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Keep your Devices Safe Now

Content analysis details: (14.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[130.49.219.81 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.49.219.81 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

3.5 VIRUS_WARNING62 'From' indicates unhelpful 'virus warning' (62)

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Confirm your Antivirus Renewal

Keep your Devices Safe Now

style="width:100%; height:auto; max-width:593px;"

border="0" usemap="#wxj8">

style="width:100%; height:auto; max-width:500px;"

border="0" usemap="#aZx4">

Stonehaven AV Phish

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 08:40:00 -0600

Received: from [130.49.219.81] (port=43415 helo=stonehaven.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNWiI-00000000OLM-0zwN

for dave@nl2k.ab.ca;

Sun, 01 Nov 2026 08:39:12 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=stonehaven.com;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@stonehaven.com;

bh=QeRpKvTR/pwEynBAxMSBniTo/iM=;

b=AYqYAat46eXtRdX6O6pICsn8e7x1UJAttpS3fb5s5njYb/79xghZemeiNv/6LyPupL1YIJ5BdzP+

d/C98QAWH5chDTB59cXDlerWvOvxS2Q/jZ58btu2vyfViIgV8O5NqXnTWHJCdfOA7+QgqQKA9V3x

VgNTHo6KJfDDtnezLmc=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=stonehaven.com;

b=hS2q4bBl8kPEVVsqfrBfrwvH+stLDGSADBrb6SFIDauqHXCcfwu5Bck7jnnpQE1m+CMvaRfZkxIL

b8ohY7QzVPGBsDJ58pczLRrsBI1Cy4QXV/o8oZHT+MTS6mKXHis4umPrFrkpYI4wrYPZG6QLsU6d

NGdegnP6nDlJ/bMwokg=;

Date: 11-01-2026

From: Antivirus Alerts

To: dave@nl2k.ab.ca

Cc: dave@nl2k.ab.ca

Subject: Confirm your Antivirus Renewal

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100218cbff5f80e-351cfa4d-48ec-4861-b2h8-6fbb151cmf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Keep your Devices Safe Now

Content analysis details: (14.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[130.49.219.81 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.49.219.81 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

3.5 VIRUS_WARNING62 'From' indicates unhelpful 'virus warning' (62)

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

Subject: {SPAM?} Confirm your Antivirus Renewal

Keep your Devices Safe Now

style="width:100%; height:auto; max-width:593px;"

border="0" usemap="#wxj8">

style="width:100%; height:auto; max-width:500px;"

border="0" usemap="#aZx4">

Stonehaven AV phish

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 12:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNaEQ-000000006FM-2Opx

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 12:24:38 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 12:24:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [130.49.219.81] (port=49575 helo=stonehaven.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNWkE-00000000OVc-00gj

for doctor@nl2k.ab.ca;

Sun, 01 Nov 2026 08:41:15 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=stonehaven.com;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@stonehaven.com;

bh=DnTKqhmJo+V2D0ketCrO8UGrqAY=;

b=qHFTDYRpyQ6rAoSA9eJClLcmlMIz1NS5mKjE5gJ7AwRnfiZOGxoRC94esk8CW25G/1FSnPODV1gC

mzB+AO+X7E/2MmcWeiSOsua7U3TwO+Ukh4SVfxcw4l+uYD2SegGFy/4g+lcQD6pD+PXY6V6YX2Ti

ycLaoR0YlaqnQydTB5w=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=stonehaven.com;

b=Q3boZqGUXsI9C3dAC1Tek4g1vr5n3EayhPbQMDHeoFfy1V8w6RHGO+pak7toJ/h/WCv41tbPCkPN

xeWhQbD24YZzO10Kfzv4n0AErRqkjnUlDohr7arOtDySCzYyZh092P7scdbKLaf1k8zjW/d2bFaL

BAG08WrwaeYrkY0+HHk=;

Date: 11-01-2026

From: Antivirus Alerts

To: doctor@nl2k.ab.ca

Cc: doctor@nl2k.ab.ca

Subject: Confirm your Antivirus Renewal

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100218cbff5f80e-351cfa4d-48ec-4861-b2h8-6fbb151cmf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Keep your Devices Safe Now

Content analysis details: (14.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[130.49.219.81 listed in bb.barracudacentral.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

3.5 VIRUS_WARNING62 'From' indicates unhelpful 'virus warning' (62)

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

0.0 T_REMOTE_IMAGE Message contains an external image

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.49.219.81 listed in bl.score.senderscore.com]

Subject: {SPAM?} Confirm your Antivirus Renewal

Keep your Devices Safe Now

style="width:100%; height:auto; max-width:593px;"

border="0" usemap="#wxj8">

style="width:100%; height:auto; max-width:500px;"

border="0" usemap="#aZx4">

dutch language phish from Google Gmail

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU22-00000000AcV-09La

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:47:26 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:47:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f198.google.com ([209.85.221.198]:48413)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNON4-0000000019r-12FD

for doctor@nk.ca;

Sat, 31 Oct 2026 23:44:48 -0600

Received: by mail-vk1-f198.google.com with SMTP id 71dfb90a1353d-5c7c0d2b0aaso358583e0c.1

for ; Sat, 31 Oct 2026 22:43:52 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=life-ac-th.20260707.gappssmtp.com; s=20260707; t=1793511826; x=1794116626; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=jsT8wrQ2uwQ+iR5OQUKOqxBW4W/ez+UH83fH5MSScfM=;

b=osYsim2pqqdHQSOS7hNXK3KOaKuOP3NWs3IU8xILre6y2d3wa9IsAm0WAZ2AGPhtCD

02n3egqAnlp9nRbHSdDkcFTURFijOxdH3jwobu4WcTP+KharYkzJ+HUBzX2TCotRqofA

O6I2MkucEctJFvkMiTvRofNJ1Zsa052gjysBtn4KRs5D0098eaqpBaFKxNXXA9uq5FF9

iCAZpVaTnD+F1diSjQCLeEBnc8bgGrqWS2qMTTk1aMGRTA+3hsRgsXxqRCF/QBk73h+W

tro9Qwj6RtLL1tGmylmtCr+7lztI7dtvBTS5FDb4+zlX37BZVMEEjCJGlZlZvNVyDuaf

qxBg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793511826; x=1794116626;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=jsT8wrQ2uwQ+iR5OQUKOqxBW4W/ez+UH83fH5MSScfM=;

b=DKArCRSX84/VynKytjXZsqzC2sjMPO1ugv4fTlyPfuBnPjYPPRGjw9GZqSA/IKZfg6

1KhQKcRt7ofY17NSQFxqLOPhTSdxepfeaAEr4OUbLVZRFWYTAL7OzH8pCKjlfJ7a+snv

WfmJLQEUvxPob56aSbdsepwu2h6tBdjWXeBgZyo7dWCOy8CAKq6xWbwvhtJHYJqbr28n

cEdHPltYyeXXY5u5iI0w7ogvR/xfSa5i0EcZfVacGVPRTPC20IS5r7dTWaA0rfs90tGs

GM/xtwDn0Swv4V9rnNgEQDt9UoWXB2R0BVzcODhyUqf+2pJofPF8ee4lZufTSq5k4tic

NzXg==

X-Gm-Message-State: AFq9FYL1/8Lv9imkwRavEwqlIwGfhVCLq9RLd2YTTXltvbiNfuFZ+ghN

SNs5Mx1DviCsjn1ji/5vDBIq+Ph0A87E5ES1WgGENFdJXW83HGPiOBD1AOr2wrgsBiEnnt3tpuk

y4jh1aZl/PONlX9XMNBst9O2m

MIME-Version: 1.0

X-Received: by 2002:a05:6102:6058:b0:7cc:95ed:30c9 with SMTP id

ada2fe7eead31-7d0726402e2mr2098128137.29.1793511826155; Sat, 31 Oct 2026

22:43:46 -0700 (PDT)

Message-ID:

Date: Sun, 01 Nov 2026 05:43:46 +0000

Subject: Nieuw! Een thuisbatterij voor uw zonnepanelen!

From: Sophie Spoelstra

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000004c7d2c065f3083cd"

--0000000000004c7d2c065f3083cd

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Beste lezer,

Heeft u zonnepanelen? Dan weet u dat u overdag stroom opwekt die u 's

avonds niet meer heeft.

Een thuisbatterij slaat die stroom op zodat u hem later gebruikt.

Resultaat: lagere energierekening en minder afhankelijkheid van het net.

Benieuwd of het iets voor u is?

Vraag gratis informatie aan

Hartelijke groet,

Sophie

Uitschrijven | Afmelden

--0000000000004c7d2c065f3083cd

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

lor:#222;padding:20px;line-height:1.6">

Beste lezer,

Heeft u zonnepanelen? Dan weet u dat u overdag stroom opwekt die u 's av=

onds niet meer heeft.

Een thuisbatterij slaat die stroom op zodat u hem later gebruikt. Result=

aat: lagere energierekening en minder afhankelijkheid van het net.

Benieuwd of het iets voor u is?

b6921c81e9" style=3D"display:inline-block;padding:13px 26px;background:#1b4=

332;color:#fff;text-decoration:none;border-radius:5px;font-size:15px">Vraag=

gratis informatie aan

Hartelijke groet,
Sophie

#eee;padding-top:12px">
1c81e9" style=3D"color:#999">Uitschrijven |
in.com#t/p/f50a876c32b6921c81e9" style=3D"color:#999">Afmelden

ight=3D"1" alt=3D"">

--0000000000004c7d2c065f3083cd--

followup spam

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 31 Oct 2026 21:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNM1r-00000000Cfy-0y7T

for dave@doctor.nl2k.ab.ca;

Sat, 31 Oct 2026 21:14:43 -0600

Resent-From: The Doctor

Resent-Date: Sat, 31 Oct 2026 21:14:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta-sp-w03.commufa.jp ([106.153.250.45]:34528)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNLEk-000000006cr-3rLh

for sales@nk.ca;

Sat, 31 Oct 2026 20:23:59 -0600

Received: from mta-snd-w03.commufa.jp by mta-sp-w03.commufa.jp with ESMTP

id <20261101022255941.EYTW.6491.mta-snd-w03.commufa.jp@commufa.jp>

for ; Sun, 1 Nov 2026 11:22:55 +0900

Received: from yk.commufa.jp by mta-snd-w03.commufa.jp with ESMTP

id <20261101022255568.LYLS.5936.yk.commufa.jp@commufa.jp>

for ; Sun, 1 Nov 2026 11:22:55 +0900

Reply-To: eaglespatrick5@gmail.com

From: Dr Patrick Eagles

To: sales@nk.ca

Subject: Good Day

Date: 31 Oct 2026 22:22:53 -0400

Message-ID: <20261031213207.0DDEC3E41824C5A0@yk.commufa.jp>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Authentication-Info: afyj3dqj

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yk.commufa.jp; s=default-1th84yt82rvi; t=1793499775;

bh=5DVkiuMUY9PV+9/pdhKagfN6JFNPRQS7jLkSHvpmpQw=;

h=Reply-To:From:To:Subject:Date;

b=X6EH/1kQyGqsDLLtvN6w7fay1yPEgLf2EodXZcXiNyzZjQCjR8cfj3btivzBIZNObEfCrUSN

43Qk9dkT8tX/9vI83WDUg4mGsIh2UAiRogi/f3N1sTuWL3PaBcTYdcgryh/t391cZgYyjhNmk+

kp4MCw0wESE5n9lJ8iW3UP/c6bSDhH61fZbzgguATC51XCU255ssYrSaMfE9e1bXUrODMRMG5+

BTk07rPfePzK+fNo3Cs9h9fei7N/nqeOEXMUCXtQFy4DHD4cGvPHOvmRncmoqw2CbzIAS6Dlmj

fKnKUvfrNY6nrAYQJoB7qDKgItsiILBh0DmnEKn/Uii5bCTw==

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Good Afternoon , I hope you received my previous message?

Dr. Patrick Eagles

Content analysis details: (8.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[106.153.250.45 listed in will-spam-for-food.eu.org]

[106.153.250.45 listed in will-spam-for-food.eu.org]

[106.153.250.45 listed in will-spam-for-food.eu.org]

[106.153.250.45 listed in will-spam-for-food.eu.org]

[106.153.250.45 listed in will-spam-for-food.eu.org]

[106.153.250.45 listed in will-spam-for-food.eu.org]

[106.153.250.45 listed in will-spam-for-food.eu.org]

[106.153.250.45 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[106.153.250.45 listed in dnsbl.ahbl.org]

[106.153.250.45 listed in dnsbl.ahbl.org]

[106.153.250.45 listed in dnsbl.ahbl.org]

[106.153.250.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[106.153.250.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[106.153.250.45 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[106.153.250.45 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[106.153.250.45 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[106.153.250.45 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[106.153.250.45 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[eaglespatrick5(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_DR No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Good Day

Good Afternoon , I hop=

e you received my previous message?
Dr. Patrick Eagles

tml>

Multi-Mailing list spam attack from Zendesk

Posted by Dave Yadallee on Monday, November 2. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 31 Oct 2026 21:13:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNM0K-00000000CQi-3Qx2

for dave@doctor.nl2k.ab.ca;

Sat, 31 Oct 2026 21:13:08 -0600

Resent-From: The Doctor

Resent-Date: Sat, 31 Oct 2026 21:13:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx2.freebsd.org ([96.47.72.81]:31349)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNHAe-00000000B0E-2nx8

for doctor@doctor.nl2k.ab.ca;

Sat, 31 Oct 2026 16:03:30 -0600

Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519)

(No client certificate requested)

by mx2.freebsd.org (Postfix) with ESMTPS id 4jHBlv6MlWz4MHX

for ; Sat, 31 Oct 2026 22:02:35 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8554-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jHBlv2rWcz4sy2

for ; Sat, 31 Oct 2026 22:02:35 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8554-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim;

t=1793484155;

h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:

in-reply-to:in-reply-to:references:references:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post;

bh=5ee7BQLY+vD+Sdd3qkMHI+DgAjmYKBluivEWRCeFQjI=;

b=gWqSrL574494WXuAvSxEbCa8TK7OqLdbGa4F3pSU89Lae0+t+y3RtyKHGGEhKZ9z9xYbgd

DWV78BFgV+evvihgsztmHzAx+FtIyhZSO+roHdv0vH8TDW8xXzpGCneFcitzWQsBum8etG

FggOtDXO6Zy5eLJJYVM9Z4AbcxBQHw2GC6o2oAIa87pwbQ69ANQLF1gyVEnfDom/w+lWXR

2KTwPPv7WWwAahKYygY+9JpGJM/PYV5K4m/nT8KnF6UfcTsgjimh7DiiajE0HPE+fE15e2

/SKb1skfpskR16UApmiBwVCEGE22fnY+Ph7hhoEQehGcoq1xJa6w38FvD1Z4iQ==

ARC-Seal: i=1; a=rsa-sha256; d=freebsd.org; s=dkim; cv=none; t=1793484155;

b=KZT2ywffzOXoN5zKH+BwGaycywAV28TSL4/N9Pf8ctUavCPZvVLp8P2VMwx0nmlAHu5Yk/

qzE7FVMQww88SNf7JGG4Q10c5cazR2/JaeKNzorZtMCiASTzx4tzQ3xmp9jGMX9ESCZ51U

SPYzf7b4K2t9W2QfTkh1jmjKuo2brYdCTNkL1pX1zb1zuCQK+CiLkEg6ibAcA+iJHmOBiq

LzLbJ4F1TnPt+nssvzY37LEKyxE+DRGdrkA7YYcpKxgDumHSkilqX8xsi0YA9nhyCpphv1

tjVKNe3YS17MQPhQNxeWd0SXtD2NjcJCkG3o8BgxisCz/u0JiX87ui2uxIYVTQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org;

s=dkim; t=1793484155;

h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:

in-reply-to:in-reply-to:references:references:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post:dkim-signature;

bh=5ee7BQLY+vD+Sdd3qkMHI+DgAjmYKBluivEWRCeFQjI=;

b=bFR9rhpGTmC6xW5JYVTSNcvCxVEWttTxyLTVN8eoJLpAGYn/dmo02KOAKijo5iRFWe4YWP

CDXuJQSvngZj36xyH8tkLW7J5sRmhBk24twJThT17chTSue18YYTl0W/MHdZ06NKW4YucJ

Kd36m3bXC07Jv/03B5xtfJt0cKQ2pWl6osqZoPikq6J5iZRorUc7zXcdEBiM4Tzl1UPyx7

6Eb0HkLLEe+0bJ5/n1+KJBxbMZIdPUyTNQDcxXdDIgv2H6uz8QGCs1ZlsbmVsTSdUr4R3I

/3e5SyYfmN9lFf2BZpHgHgRevKIoxZ8Z2UY0kTst7WfiumYgg1ffRsUswxGicw==

ARC-Authentication-Results: i=1;

mx1.freebsd.org;

dkim=pass header.d=oclc.org header.s=zendesk2 header.b=W1+y8P5i;

spf=pass (mx1.freebsd.org: domain of support@oclc.org designates 192.161.149.4 as permitted sender) smtp.mailfrom=support@oclc.org;

dmarc=pass (policy=quarantine) header.from=oclc.org

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jHBl35sxJz6xPkj;

Sat, 31 Oct 2026 22:01:51 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8554@FreeBSD.org)

X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org

Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jHBjv55YJz6xQ2F

for ; Sat, 31 Oct 2026 22:00:51 +0000 (UTC)

(envelope-from support@oclc.org)

Received: from mta-out4.pod19.use1.zdsys.com (mta-out4.pod19.use1.zdsys.com [192.161.149.4])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange secp256r1 server-signature RSA-PSS (4096 bits) server-digest SHA256)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jHBjs6444z4rjj

for ; Sat, 31 Oct 2026 22:00:49 +0000 (UTC)

(envelope-from support@oclc.org)

Authentication-Results: mx1.freebsd.org;

dkim=pass header.d=oclc.org header.s=zendesk2 header.b=W1+y8P5i;

spf=pass (mx1.freebsd.org: domain of support@oclc.org designates 192.161.149.4 as permitted sender) smtp.mailfrom=support@oclc.org;

dmarc=pass (policy=quarantine) header.from=oclc.org

Received: from unknown (unknown [127.0.0.6])

by mta-out15.pod19.use1.zdsys.com (Zendesk) with HTTP

id 33430aee-3571-442e-8c53-9a1cc98b3c52;

Sat, 31 Oct 2026 22:00:48 +0000 (UTC)

Date: Sat, 31 Oct 2026 22:00:48 +0000

From: Support

Reply-To: Support

To: Clement Erhardt Lehman

Cc: Accounts Payable ,

Creative Commons ,

Brewster Kahle ,

Answers ,

Admin ,

Pandas-dev ,

Helpdesk ,

Info ,

Contact ,

Freebsd-questions ,

Misc ,

Netbsd-users ,

Info ,

Info ,

Info ,

Support ,

Webmaster ,

Help ,

Drh ,

Info ,

Info ,

Info ,

Info ,

Support ,

Psf ,

Numpy-scipy ,

Executive-director ,

Gnu ,

Info ,

Press ,

Info ,

Arch-general ,

Apache ,

Users ,

Core ,

Php-webmaster ,

Pgsql-general ,

Info ,

Emaillist ,

Jenkins-infra ,

Cmake ,

Thpnashville Pio ,

Thpknoxville Pio ,

Thpchattanooga Pio ,

Thpmemphis Pio ,

Recordrequests ,

Revenue Support ,

Thp Pio

Message-ID:

In-Reply-To:

References:

Subject: =?UTF-8?Q?Thank_you_for_your_OCLC_Support_Request_1032141_-_URGENT?=

=?UTF-8?Q?_CORPORATE_NOTICE_=E2=80=94_Nestl=C3=A9_S.A.,_Oracle_Corporation,?=

=?UTF-8?Q?_Hilton_=E2=80=94_Nashville_Hotel_Incident_and_Executive_Review?=

List-Archive: https://lists.freebsd.org/archives/freebsd-questions

X-BeenThere: freebsd-questions@freebsd.org

Sender: owner-freebsd-questions@FreeBSD.org

List-Id: User questions

List-Post:

List-Help:

List-Subscribe:

List-Unsubscribe:

List-Owner:

Precedence: list

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--==_mimepart_6ae66510798c5_eb18b8458ae";

charset=utf-8

Content-Transfer-Encoding: 7bit

X-Delivery-Context: rule-2-event-id-57021334097811

X-Zendesk-From-Account-Id: 7d4af63

Auto-Submitted: auto-generated

X-Auto-Response-Suppress: All

X-Mailer: Zendesk Mailer

X-Zendesk-Email-Id: 01M69ZNHKEQANVBHPXDKB5DBM6

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oclc.org; q=dns/txt;

s=zendesk2; t=1793484048; bh=5ee7BQLY+vD+Sdd3qkMHI+DgAjmYKBluivEWRCeFQjI=;

h=date:from:reply-to:to:cc:message-id:in-reply-to:references:subject:mime-version:content-type:content-transfer-encoding;

b=W1+y8P5ibvsaBDOHiPEuLFNEMdqR6bfbrGkjUTdRPYywfKe2nWrfODDKKJ2f0J2Fzfmnao4Il16I5z5+k3jnaJR8Lq9heZTEAryb8Ihnom82O5J1sDW4zbRj0Ja4i42NxikyjN1rEyE3aa7S0wKAqVezBl5WzGE3zKvuIXATVhL3/1n8DYuUvuT8/dkGxh2r+/yhkSOglAVek+4iLBmYEg8KjLmz/+MTnhWbx8wwytLOQQk5idoABqZ3icr3/bj6hn8MVgUKn4xFi4zf7DAvGkAQ4SVyGDHH+shgys0DAiln1fiH+F5INW0s35T9qWZQgU14c78oPWreVqd4UYrHOQ==

X-Rspamd-Queue-Id: 4jHBjs6444z4rjj

X-Spamd-Bar: /

X-Spamd-Result: default: False [0.06 / 15.00];

SUSPICIOUS_RECIPS(1.50)[];

URI_COUNT_ODD(1.00)[5];

DWL_DNSWL_LOW(-1.00)[oclc.org:dkim];

DMARC_POLICY_ALLOW(-0.50)[oclc.org,quarantine];

RCVD_DKIM_ARC_DNSWL_MED(-0.50)[];

RCVD_IN_DNSWL_MED(-0.20)[192.161.149.4:from];

ONCE_RECEIVED(0.20)[];

R_SPF_ALLOW(-0.20)[+ip4:192.161.144.0/20];

R_DKIM_ALLOW(-0.20)[oclc.org:s=zendesk2];

MIME_GOOD(-0.10)[multipart/alternative,text/plain];

MANY_INVISIBLE_PARTS(0.05)[1];

XM_UA_NO_VERSION(0.01)[];

RCVD_TLS_LAST(0.00)[];

MIME_TRACE(0.00)[0:+,1:+,2:~];

RCPT_COUNT_TWELVE(0.00)[49];

FREEMAIL_TO(0.00)[gmail.com];

ARC_NA(0.00)[];

FROM_HAS_DN(0.00)[];

HAS_REPLYTO(0.00)[support@oclc.org];

TO_MATCH_ENVRCPT_SOME(0.00)[];

FROM_EQ_ENVFROM(0.00)[];

TO_DN_ALL(0.00)[];

MLMMJ_DEST(0.00)[freebsd-questions@freebsd.org];

RCVD_COUNT_ONE(0.00)[1];

ASN(0.00)[asn:14618, ipnet:192.161.149.0/24, country:US];

DKIM_TRACE(0.00)[oclc.org:+];

REPLYTO_EQ_FROM(0.00)[]

----==_mimepart_6ae66510798c5_eb18b8458ae

Content-Type: text/plain;

charset=utf-8

Content-Transfer-Encoding: quoted-printable

##- Please type your reply above this line -##

Your request (#1032141) about URGENT CORPORATE NOTICE =E2=80=94 Nestl=C3=

=A9 S.A., Oracle Corporation, Hilton =E2=80=94 Nashville Hotel Incident a=

nd Executive Review has been received and is being reviewed by our su=

pport staff. =

=

If you would like to add further information to your query or have a ques=

tion, please reply to this email or click on the ticket number link above=

. =

Thank you,

OCLC Support

Did you know that if you
gin/registration?auth_origin=3D3770367%2Cfalse%2Ctrue&brand_id=3D3770367&=

return_to=3Dhttps://oclc.zendesk.com/hc/en-us/requests/new?ticket_form_id=

=3D360003003694;theme=3Dhc">register for an account you can review th=

e history of the support tickets you have submitted? You can also submit =

tickets here and get help suggestions. Click on this
elp.oclc.org/Librarian_Toolbox/Troubleshooting/How_can_I_get_an_OCLC_Supp=

ort_account">link for more info.

Because what is known must be shared.=C2=AE =

--------------------------------

This email is a service from OCLC Support.

[P60V5R-207LM]=

----==_mimepart_6ae66510798c5_eb18b8458ae

Content-Type: text/html;

charset=utf-8

Content-Transfer-Encoding: quoted-printable

">

0;">

rande',Verdana,Arial,sans-serif; font-size: 12px; color:#444444;">

##- Please type your reply above this =

line -##

Your request (
c.zendesk.com/hc/requests/1032141">#1032141) about URGENT CORPORAT=

E NOTICE =E2=80=94 Nestl=C3=A9 S.A., Oracle Corporation, Hilton =E2=80=94=

Nashville Hotel Incident and Executive Review has been received and =

is being reviewed by our support staff.

If you would like to add=

further information to your query or have a question, please reply to th=

is email or click on the ticket number link above.

Tha=

nk you,
OCLC Support

Did you know that if you
f=3D"https://oclc.zendesk.com/auth/v2/login/registration?auth_origin=3D37=

70367%2Cfalse%2Ctrue&brand_id=3D3770367&return_to=3Dhttps://oclc.=

zendesk.com/hc/en-us/requests/new?ticket_form_id=3D360003003694;theme=3Dh=

c">register for an account you can review the history of the support =

tickets you have submitted? You can also submit tickets here and get help=

suggestions. Click on this
olbox/Troubleshooting/How_can_I_get_an_OCLC_Support_account">link for=

more info.

Because what is known must be shared.=C2=AE=

rande',Verdana,Arial,sans-serif; font-size: 12px; color: #aaaaaa;

margin: 10px 0 14px 0; padding-top: 10px; border-top: 1px solid #eeee=

ee;">

This email is a service from OCLC Support. Delivered by
tps://www.zendesk.com/support/?utm_campaign=3Dtext&utm_content=3DOCLC=

&utm_medium=3Dpoweredbyzendesk&utm_source=3Demail-notification" s=

tyle=3D"color:black;" target=3D"_blank">Zendesk

">[P60V5R-207LM]

display:none">

//schema.org/ViewAction">
zendesk.com/hc/requests/1032141">
iew ticket">

=

----==_mimepart_6ae66510798c5_eb18b8458ae--

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	November '26					Forward →
						1
2	3	4	5	6	7	8
9	10	11	12	13	14	15
16	17	18	19	20	21	22
23	24	25	26	27	28	29
30