Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 17:52:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNfLX-00000000MzW-1Ml8

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 17:52:19 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 17:52:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f71.google.com ([209.85.217.71]:54386)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNdnl-000000001gE-2Yhm

for doctor@nk.ca;

Sun, 01 Nov 2026 16:13:23 -0600

Received: by mail-vs1-f71.google.com with SMTP id ada2fe7eead31-7cc36b97a77so662679137.0

for ; Sun, 01 Nov 2026 14:12:27 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=iqra.edu.pk; s=google; t=1793571141; x=1794175941; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=M//DUcJXR+27mETYnxHTCr+JhwQnOJ1OmnysqfMK7Hs=;

b=mnGfQVovZ9YxDSToGlnDO7kyQiKDOAhWMdxUyrZB7s1yFn2wUn0703mIPHNlLa8k/n

3M2PDAOI9qz5AzTYysF9lChYANOyiMtcA5ZayRQp7E0X4dGRMbKT1005FQu1r5ICtlot

FgI9CIeYyglMR0uX21IsgC3uNSrJ2/+1x8BUEj2qMC2WT9U8zv131l7NSO2aMVwjJ9Bu

rpzq5mXWEiE6bTkOsSXYBaquKeobCnArxEhstr5lZOoK8S/M7RewhMSQSLfbyeYSFqE1

e9fcoyQvBGNZfy+fGnvgUzcAkxWiGSR5i+AjEtOMdRqN2C592C34dqEjFRH+qsNLtIlw

tRBg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793571141; x=1794175941;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=M//DUcJXR+27mETYnxHTCr+JhwQnOJ1OmnysqfMK7Hs=;

b=VawzpLmccK1gRlIcfTImvJG9oAX2P9H42ax36tb3g8+vtonpjnAorLkPuBnTv7J2Rr

mImPC5LZQGrXubnCVoB4XOY47VS5chHzS0fwjl57Wzq/2zax2ulsm46ace0UbazZ1eYx

OaUSRm3ZpCUVqQav9zZQFRMFRrRtpvs5G2DuSMBHnNn4IDPZKAC3qbxKeza09Imrgsfg

xbTlHU/RiR8EFlvi2E/LN+U0AwI8HXCDwM6AlOZrXBfGt3k3rc4GSZOtbP7dTo0Tdi5e

L9bHHyOSJ6YReieBc2DDNfYmaUv2OKZdYkHnGxdT3XaU/tZHKr1+6OfGn2g1gUsWfkmw

zmsw==

X-Gm-Message-State: APuU4Z9deepx76tjoBcMD6Tb+BP0HMGMyAZpaNoeYJCV4H4zVXTN8HXT

dOf+DeTQY7FdNWX0eyfw0jeHHG143uvMrBlZYCGFuJkspJ2+/MsWENQ4odu0LoKAs1wMwXvMLbK

63j+XQCz/XsbBE13OtlFszMQSIl4i1iNVNwaHGX0hJgdazYxI1wcN7M6e9qy1SAV6i6IxBdk=

MIME-Version: 1.0

X-Received: by 2002:a05:6102:508e:b0:7b2:508e:3d57 with SMTP id

ada2fe7eead31-7d0727b109amr2731681137.4.1793571141186; Sun, 01 Nov 2026

14:12:21 -0800 (PST)

Message-ID:

Date: Sun, 01 Nov 2026 22:12:21 +0000

Subject: Uw pakket is onderweg

From: Bezorgservice

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000c01218065f3e52ff"

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Geachte klant, Er is een pakket naar u onderweg. Volg uw zending

in real-time via onze Track and Trace service. Volg uw pakket



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: iqra.edu.pk]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.71 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.71 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.217.71 listed in bl.score.senderscore.com]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Uw pakket is onderweg



--000000000000c01218065f3e52ff

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Geachte klant,



Er is een pakket naar u onderweg. Volg uw zending in real-time via onze

Track and Trace service.



Volg uw pakket



Met vriendelijke groet,

Bezorgservice



Uitschrijven | Afmelden





--





--000000000000c01218065f3e52ff

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#333;padding:20px;line-height:1.6">

Geachte klant,



Er is een pakket naar u onderweg. Volg uw zending in real-time via onze =

Track and Trace service.




f3b627e5ed57" style=3D"display:inline-block;padding:13px 26px;background:#0=

03049;color:#fff;text-decoration:none;border-radius:5px;font-size:15px">Vol=

g uw pakket



Met vriendelijke groet,
Bezorgservice




#eee;padding-top:12px">
27e5ed57" style=3D"color:#999">Uitschrijven
|
calles.com#t/p/db3b037ff3b627e5ed57" style=3D"color:#999">Afmelden






height=3D"1" alt=3D"">




=




--000000000000c01218065f3e52ff--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 13:13:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNazS-000000006wS-3GpC

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 13:13:14 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 13:13:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f197.google.com ([209.85.160.197]:51461)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <59210401132@ksu.ac.th>)

id 1xNaa4-000000003hW-1h0l

for doctor@nk.ca;

Sun, 01 Nov 2026 12:47:02 -0600

Received: by mail-qt1-f197.google.com with SMTP id d75a77b69052e-5364605e74bso68250341cf.3

for ; Sun, 01 Nov 2026 10:46:06 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ksu-ac-th.20260707.gappssmtp.com; s=20260707; t=1793558760; x=1794163560; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=3Ntq1Q3iIat+Am4YTg15F3hc8fxsnRk/vufgcgDDEWY=;

b=lxL/gEgaIYLwoN25wrES4yuDQlxeD3klyfOSlnMMgZ1qwOjFMnlC+qO9nYqlR6N3mA

LG1b6oOMcUiuwthsPpWqQ6eSuI3I/ApP+CY8NJa7JF8s0a+zoPyWbdDtV7EZPqDzhycV

oMRP5nW4S4G2hDRJSmPTFYv5QIwGbgLuqEAshFBvqBoTeOB39pOrX91f4bsXsLcsaFaz

rpmZzm0gq1Cf0mVerViHOatnEX79t6RDHaRgj0BHsI8XBRyfEVNPb+/Bwe3ebsI4eaPx

h3GaH0F35Lt6IL7fGH0rPrImClDJ9vzSdf6UUhOf5vuBB8o8U8trkkZwjLYfU0PcnZAr

inog==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793558760; x=1794163560;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=3Ntq1Q3iIat+Am4YTg15F3hc8fxsnRk/vufgcgDDEWY=;

b=KNQk6Do7cw/UHMt0EasThHjtTEmcDTZXuyoEq65lfReTB9MxOL5dmIgxv6bnAjzhCM

vMxpxfTAzqC5xe48JjnLc4JIvJiBaM8i+4fq9NufUQ+fHIR9qKGWgjTHyx+58i1AgDmh

4VkiMYR6A2fUzL7b64hC/UnspZvU1c1XuZMvrC7VjX4UK17YK/7hY0n7eryRPiK4/3R5

BhODJ1vw2WyPJnLDUY7YmrtmsbUyYEfLVo3U3r0bHigxpb/PqYgWCJJpaJHHtsIW5y+W

K5BPgdHvFDs3uSnKXUKdJDteQ45MhgVSnHUaFBcD7bUBg5kkYLCW7MwzVh9sG8HpZGfw

13LA==

X-Gm-Message-State: AFq9FYIohq0xgUP3F3Fgr91p2GES8s2Tqa9GGZjlhaE5vJR62zHVEphy

fw5hdd9BGk2BUL9Cctr4Fd4SFEi5HTKTf2htPutkP+SmqOYuheesyzY3+4euCYRfnXwAeIIw7AP

Il++9ex01kxmeB5XYsC8AVJOH

MIME-Version: 1.0

X-Received: by 2002:a05:622a:5506:b0:535:a5f7:d588 with SMTP id

d75a77b69052e-542b7ef7318mr142697901cf.66.1793558759939; Sun, 01 Nov 2026

10:45:59 -0800 (PST)

Message-ID:

Date: Sun, 01 Nov 2026 18:45:59 +0000

Subject: Energievergelijking november: uw postcode is goedgekeurd

From: Energiecheck Nederland <59210401132@ksu.ac.th>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000c534c0065f3b708e"

X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ptherapeutic transformationoprovincial historicalstidentification

infrastructurecoinvestigation pedagogydeorchestration commentarychbiotechnology

transformationescholarship planetaryck gestparametric [...]



Content analysis details: (9.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

[209.85.160.197 listed in dnsbl.ahbl.org]

[209.85.160.197 listed in dnsbl.ahbl.org]

[209.85.160.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.197 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FROM_LOCAL_DIGITS From: localpart has long digit sequence

0.3 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence

0.1 TW_NV BODY: Odd Letter Triples with NV

0.1 TW_VF BODY: Odd Letter Triples with VF

0.1 TW_GY BODY: Odd Letter Triples with GY

0.1 TW_LR BODY: Odd Letter Triples with LR

0.1 TW_YJ BODY: Odd Letter Triples with YJ

0.1 TW_YG BODY: Odd Letter Triples with YG

0.1 TW_YI BODY: Odd Letter Triples with YI

0.1 TW_YV BODY: Odd Letter Triples with YV

0.1 TW_OV BODY: Odd Letter Triples with OV

0.1 TW_LV BODY: Odd Letter Triples with LV

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.197 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.160.197 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.2 HTML_TITLE_SUBJ_DIFF No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.8 LONGWORDS Long string of long words

0.0 TVD_SPACE_RATIO No description available.

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 MANY_SPAN_IN_TEXT Many tags embedded within text

Subject: {SPAM?} Energievergelijking november: uw postcode is goedgekeurd





Ptherapeutic transformationoprovincial historicalstidentification infrastructurecoinvestigation pedagogydeorchestration commentarychbiotechnology transformationescholarship planetaryck gestparametric quantitativeabudgetary territorialrleadership deliverablet vfiduciary satisfactoryoor nprovision technologyoresponsibility sportsmanshipvsedentary relationshipemcalorimetric implementationbeexperimental apprenticeshipr · vergcomprehensive sponsorshipelprerequisite incendiaryijk dprocurement individualinonparametric categorizationrect benvironmental deploymentij 1sustainability horizontal0parliamentary satisfactory+ leverplanetary frameworkannanotechnology supervisorycbiocompatibility developmentieelectrophysiology communicationrfundamental parametrics

NOfellowship auxiliaryVpotentiometric portfolioEpulmonology constitutionalMcoordination potentiometricBquantitative authorizationER 2portfolio imaginary0effectiveness accidental26



Urelationship internshipw posindustrial engineeringtcdocumentation isoelectricopreferential identificationdordinary participatione ilongitudinal appropriations goedgfluorometric environmentaledepreciation exponentialkliterary biostatisticseurd vinterpretation standardizationooencryption stakeholderr daccountability capillarye gelectromagnetic specificationraccidental scalabilityaorganizational observationaltis endignitary probabilisticeestablishment boundaryrgempirical accountabilityievimprovement ornamentaleinternship censorshiprinvoluntary ratificationgfundamental sustainabilityellongitudinal internationaliprobabilistic internationaljpreferential visionaryking



Wstewardship responsibilitye vdetrimental representationecapillary sentimentalrgaccountability performanceeparametric organizationallpolymeric censorshipisecondary resolutionjkchampionship fellowshipeprofessional transparencyn bexperimental environmentalij 1championship participation0dignitary environmental+ linstitutional substantialevisionary telecommunicationvenvironmental contradictoryeneurodegenerative satisfactoryrsentimental confidentialacontinental containerizationncommissary infrastructurecpreferential nephrologyitransportation ownershipemilestone vocabularyrcomplimentary conceptuals econtinental regulatoryn tinitiative certificationocircumstantial procurementnsubstantial methodologyedocumentary stipulationn hevoluntary influentialt lscholarship substantialarepresentation communicationarepresentation sustainabilitygscalability standardizationsresidential deploymentte ttemporary instrumentalarassessment budgetaryieresidential aerodynamicf voodirectorship sentimentalr uw aoperations satisfactoryddeployment establishmentrinterpretation comprehensiveepresentation tributarys. Dsubstantial observationaluassessment migrationuancillary aerodynamicrelementary demonstrationt 2 mbotanical spectroscopicitheoretical resolutionntherapeutic accreditationutelecommunication fundamentaltephotovoltaic implementationn.

Smigration gastroenterologytaauthorization ordinaryrpreliminary retrospectivet miitinerary polymericjapprenticeship innovationn vdemonstration managershipergpetrochemical individualelappropriation territorialijparametric temporarykindepartmental performanceg

1throughput milestone0+

lestoichiometric provincialveranccraftsmanship retrospectiveimonetary representationers vergsolitary nephrologyelecompetency influentialkeportfolio corollaryn



2 menvironmental provisioningiinitiative censorshipn

inconceptual professionalvuancillary partnershiplticredential polymericjdspectroscopic authorship, mecentenary sanctuaryebeneficiary administrativer nicommunication efficiencyehorizontal developmentalt



1provincial ordinance0empirical constitutional0authentication boundary%

gprocurement provisionrasustainability legislationtis en vinvoluntary procurementrordinance dermatologyiestablishment biologicaljportfolio polymericbobservational arbitrationlsatisfactory instrumentalijanniversary solitaryvadministrative secretaryecommunication contradictorynchromatographic structurald



De ediversification membershipnaccreditation developmentalergconceptual introductoryicraftsmanship authenticationemexperimental implementationaelectromagnetic actuarialrlegendary methodologykreadership sanctuaryt icommunication authorizations iimplementation gravimetricn bratification ordinanceewsedentary assessmenteinflammatory migrationginvestigation parliamentaryincompanionship virtualizationg. Sindpharmacokinetics actuarials dcommunication procuremente lrevenue constitutionalatheoretical detrimentalatbiostatistics preliminaryspetrochemical longitudinaltsanctuary benchmarke telectrical sanctuaryarspecification potentiometricitherapeutic continentalefmomentary partnershiphelectrical secondaryercontrary satisfactoryzeducational inflammatoryileadership auxiliaryecompetency developmentnconsequential exemplaryigovernance documentarynmethodology partnershipg bincremental boundaryedignitary voluntarytaportfolio throughputleinfrastructure governancen vstochastic proceduralecoronary presidentialeordinance procurementl huismetallurgical trusteeshiphanalytical consequentialosecretary fiduciaryupetrochemical rhetoricaldeacknowledgment neurologyns meer daparliamentary presidentialn nsubstantial introductoryodinitiative symposiumiresidential stationarygcommentary historical. Een snecessary transformationnsymposium understandingetemporary expenditurelcontinental structurallstandardization periodicale chunderstanding ornamentaletelecommunication portfoliocnephrology solitaryk laimprovement radiologyasustainability temporaryt zgovernmental experimentalieitinerary fluorometricn of u kisoelectric provisioningunsolitary ownershipt beconceptual monetaryspharmaceutical preferentialpbotanical documentaryarconceptual specificationen omanagement underwritingp uw huiamortization orthopedicdieffectiveness exponentialgreconciliation resolutione conreadership exemplarytrcommissary voluntaryaguardianship supplementarycexploratory communicationtaerodynamic individual.



Vallocation planetaryuinfrastructure itineraryl hisanctuary beneficiaryerepository integrationraccountability competencyondstructural mentorshiper uthermodynamic rudimentaryw gecomprehensive initiativegdocumentary behavioraleinterpretation experimentalvenpotentiometric memberships in emethodology institutionaln osubstantial innovationntsupplementary incrementalvcardiology fundamentalang dirinfrastructure therapeuticeguardianship substantialcelectrical monetaryt een pinnovation reconciliationecatalytic prognosisrsoleadership expenditureocapillary understandingnlinanotechnology heuristicjparliamentary analyticalk ovframework sustainabilityeoperations documentaryrziliterary performancechretrospective contextualt vsedentary heuristicacongressional biostatisticsn hcircumstantial boundaryestandardization entrepreneurshipt larhetorical efficiencyacommunication dissertationgincendiary sponsorshipste tcommercial responsibilityadeterministic leadershiprperformance prospectiveiintegration categorizationef icensorship relationshipn uinternship qualitativew roptimization curriculumestructural inflammatorygicraftsmanship workmanshipo.

Bcontinental performanceekcontextual missionaryicommunication structuraljsanctuary administrationk mquarterly partnershipicomputational cardiologyjn rbiotechnology ancillaryeorthopedic therapeuticscollaboration prerequisiteulperceptual internshiptaarhetorical provisiont →

Energidevelopment necessaryecdermatology incrementalhedemonstration anniversarycparticipation ratificationk Nedremuneration symposiumecomputational specificationrcommunication territoriallinstitutional environmentalajurisdictional congressionalnperiodical pediatricd · Grresponsibility milestoneaallocation supplementarytprovision parliamentaryis vergremuneration exponentialeclassification differentiallexemplary legislationicorrelational authorshipjsubstantial accreditationkingincremental customaryssepresidential corollaryrleadership temporaryvforecast stationaryiancillary substantialce

Aprobabilistic ornamentalfmbiological exponentialesupplementary institutionallmanagership configurationdedevelopmental sustainabilityn · Orudimentary championshippcomprehensive capillarytneurodegenerative incendiary-momentary heuristicoprovincial corollaryut

Matsato Knife phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU2m-00000000Aha-1TQY

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:48:12 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:48:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 228.228.189.35.bc.googleusercontent.com ([35.189.228.228]:56746 helo=googleusercontent.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNS9u-00000000PYm-3SGc

for doctor@nl2k.ca;

Sun, 01 Nov 2026 03:47:28 -0600

Received: by googleusercontent.com (Postfix, from userid 1000)

id 17AB64BA1; Sun, 1 Nov 2026 09:46:22 +0000 (UTC)

To: doctor@nl2k.ca

From:=?UTF-8?B?TWF0c2F0byBLaXRjaGVuIEV4cGVydHM=?=

Subject:=?UTF-8?B?VXBncmFkZSBZb3VyIEN1dGxlcnkg4oCTIE1hdHNhdG8gS25pZmUsIExhc2VyLVByZWNpc2lvbiBhdCA3MCAlIE9mZg==?=

MIME-Version: 1.0

Reply-To: =?UTF-8?B?cmVwbHk=?=

Content-Transfer-Encoding: base64

Content-Type: text/html; charset=utf-8

Message-Id: <20261101094622.17AB64BA1@googleusercontent.com>

Date: Sun, 1 Nov 2026 09:46:22 +0000 (UTC)

X-Spam_score: 13.4

X-Spam_score_int: 134

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Get Your Knife Your current knife is costing you time

and precision.



Content analysis details: (13.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

[35.189.228.228 listed in dnsbl.ahbl.org]

[35.189.228.228 listed in dnsbl.ahbl.org]

[35.189.228.228 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[35.189.228.228 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.0 SPF_HELO_NEUTRAL SPF: HELO does not match SPF record (neutral)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.189.228.228 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 TVD_RCVD_IP Message was received from an IP address

3.0 RECEIVED_MULTICAST A multicast IP adress appears in Received header

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[35.189.228.228 listed in wl.mailspike.net]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible

phishing

1.0 HDRS_MISSP Misspaced headers

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?UTF-8?B?VXBncmFkZSBZb3VyIEN1dGxlcnkg4oCTIE1hdHNhdG8gS25pZmUsIExhc2VyLVByZWNpc2lvbiBhdCA3MCAlIE9mZg==?=







Get Your Knife



Your current knife is costing you time and precision.







A quality knife is the difference between frustration and efficiency in the kitchen. The right tool changes everything.



Stop Dealing With:



Dull blades that crush instead of slice



Poor balance that causes hand fatigue



Knives that rust or chip after minimal use



Why This Knife Works So Well



The Matsato Premium Chef Knife: Professional Results, Guaranteed



Built for serious home cooks who demand quality:



PRECISION CONTROL



Unique finger hole design gives you perfect balance and control



LASTING SHARPNESS



Ice-hardened stainless steel stays sharp 3x longer than standard knives



SOLID GRIP



Premium beech wood handle prevents slipping, even with wet hands



One knife. Multiple uses. Superior results every time.

Claim Your 70% Off Now!



All contents of this email should be considered as advertisement or promotion. If you decide you don't want to receive emails from us please click here to unsubscribe from these promotional emails.



UAB Convenity • Gedimino g. 45-7, LT-44239 Kaunas, Lithuania • +4932213260060

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU2a-00000000AgY-2HWp

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:48:00 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:48:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f197.google.com ([209.85.214.197]:41534)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNQxg-00000000GoU-02bZ

for doctor@nk.ca;

Sun, 01 Nov 2026 02:30:47 -0600

Received: by mail-pl1-f197.google.com with SMTP id d9443c01a7336-2eb238d8129so5405295ad.2

for ; Sun, 01 Nov 2026 01:29:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=santateresita-edu-pe.20260707.gappssmtp.com; s=20260707; t=1793521784; x=1794126584; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=J6U3pHZq2NI3ka8ojA5slbOfqGvM0cpGdB7Hkd7FZWQ=;

b=NBygq/UsOkbNIiKO2hOK7Lb7vWNyipb6vxJFs4uJbFlTSluludSPtvxFBES6SKXTVr

w+Tv34/oFmqQb1sZOnNPW8h2Wt5mEdR0z0+M5H3dSagThDixRfeRorzP2YMwfOEkfrPB

Rq0vd3RP7mWxJDykEIEmdBnDk5ZpX8dwIfUXtxsSdrf9PNc3wtdpkSOcwXvBNUo2OYOI

MjO9vslr4SOJke68rmmE/UN3V72MEaBzU6sdbs29tKNUbJ3VWSmPcXln+dI9agdN5A9Y

5lcW3modk4d5rXLqstFCUX4JGG+ols4EPTblBjOf82bKMQEdmSXkUd/ro/QohVt+1U0Y

FWOA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793521784; x=1794126584;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=J6U3pHZq2NI3ka8ojA5slbOfqGvM0cpGdB7Hkd7FZWQ=;

b=zz+w/0GDxygrrqWVolLlnNc0eiZ0lhtLkv+okuP70Y1YlfvuHdXg5Jt3Wz1peBT0jS

p0X9H3+NNZfJa7BwCvX0cqwktLmHZcLmpZX5T1SqmAeL+o4sr+ICzaR4rvrjZ/SKLwA/

QbGT1aIsLLSNDgpSXp/Ov6i75En269s9LstijgXU5nmHdj887q0mMj4j1Y38kj6+04eR

+NbBmc10hT3+0CMtTgK7HO94S1uzcaxLaDnNVMBRLrxvda3O5echaPnjqNLSOTs5Ov7q

XQF9CEA4cKAtDdQAfQe+iU2PgYixo0xD9XvbweBsZoQkDYoe5ZPmT0SE7uAGEa1azz/W

9Avg==

X-Gm-Message-State: AFq9FYKiDDnl7lKs/hY34plueXwLyMQKySvyTrhiEQxfV/PU/mnOiId8

rzDEFbkQX0gY6abmMP8yvc0J6dPd1LNQC5dzjLq3ACx9/dQPmoGLQ3roP+eg5QiGO4lAfTvpaiM

+G7dc+eKRZlXbI4ra3Dg/sTyS

MIME-Version: 1.0

X-Received: by 2002:a53:ac82:0:b0:67a:6bf9:e2c4 with SMTP id

956f58d0204a3-67ba4f6e22bmr10100204d50.4.1793521458714; Sun, 01 Nov 2026

01:24:18 -0700 (PDT)

Message-ID:

Date: Sun, 01 Nov 2026 08:24:18 +0000

Subject: Uw ANWB-beloning wacht op u

From: ANWB Klantenservice

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000071a928065f32c1ce"



--00000000000071a928065f32c1ce

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Beste ANWB-lid,



Wij voeren een kort klantenonderzoek uit en uw mening is waardevol voor ons.



Als dank voor het invullen maakt u kans op een handige Autokoelbox, ideaal

voor onderweg.



Vul de enquete in



Nog maar een beperkt aantal kortingscodes beschikbaar.



Met vriendelijke groet,

ANWB Klantenservice



Uitschrijven | Afmelden





--00000000000071a928065f32c1ce

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#222;padding:20px;line-height:1.6">

Beste ANWB-lid,



Wij voeren een kort klantenonderzoek uit en uw mening is waardevol voor =

ons.



Als dank voor het invullen maakt u kans op een handige Autokoelbox, idea=

al voor onderweg.




b6d8e7672d" style=3D"display:inline-block;padding:13px 26px;background:#f5a=

623;color:#fff;text-decoration:none;border-radius:5px;font-size:15px">Vul d=

e enquete in



Nog maar een beperkt aantal kortings=

codes beschikbaar.



Met vriendelijke groet,
ANWB Klantenservice




#eee;padding-top:12px">
e7672d" style=3D"color:#999">Uitschrijven
|
an.com#t/p/48d055c162b6d8e7672d" style=3D"color:#999">Afmelden






ight=3D"1" alt=3D"">

--00000000000071a928065f32c1ce--

Matsato Knife phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU2r-00000000Ai1-31dN

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:48:17 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:48:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 228.228.189.35.bc.googleusercontent.com ([35.189.228.228]:54618 helo=googleusercontent.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNSBB-00000000Pht-1SVf

for doctor@netknow.ca;

Sun, 01 Nov 2026 03:48:49 -0600

Received: by googleusercontent.com (Postfix, from userid 1000)

id 857E24DA1; Sun, 1 Nov 2026 09:47:21 +0000 (UTC)

To: doctor@netknow.ca

From:=?UTF-8?B?TWF0c2F0byBLaXRjaGVuIEV4cGVydHM=?=

Subject:=?UTF-8?B?VXBncmFkZSBZb3VyIEN1dGxlcnkg4oCTIE1hdHNhdG8gS25pZmUsIExhc2VyLVByZWNpc2lvbiBhdCA3MCAlIE9mZg==?=

MIME-Version: 1.0

Reply-To: =?UTF-8?B?cmVwbHk=?=

Content-Transfer-Encoding: base64

Content-Type: text/html; charset=utf-8

Message-Id: <20261101094721.857E24DA1@googleusercontent.com>

Date: Sun, 1 Nov 2026 09:47:21 +0000 (UTC)

X-Spam_score: 13.4

X-Spam_score_int: 134

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Get Your Knife Your current knife is costing you time

and precision.



Content analysis details: (13.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[35.189.228.228 listed in bb.barracudacentral.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

[35.189.228.228 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

[35.189.228.228 listed in dnsbl.ahbl.org]

[35.189.228.228 listed in dnsbl.ahbl.org]

[35.189.228.228 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.189.228.228 listed in dnsbl.ahbl.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.0 SPF_HELO_NEUTRAL SPF: HELO does not match SPF record (neutral)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 TVD_RCVD_IP Message was received from an IP address

3.0 RECEIVED_MULTICAST A multicast IP adress appears in Received header

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.189.228.228 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[35.189.228.228 listed in wl.mailspike.net]

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible

phishing

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

1.0 HDRS_MISSP Misspaced headers

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?UTF-8?B?VXBncmFkZSBZb3VyIEN1dGxlcnkg4oCTIE1hdHNhdG8gS25pZmUsIExhc2VyLVByZWNpc2lvbiBhdCA3MCAlIE9mZg==?=







Get Your Knife



Your current knife is costing you time and precision.







A quality knife is the difference between frustration and efficiency in the kitchen. The right tool changes everything.



Stop Dealing With:



Dull blades that crush instead of slice



Poor balance that causes hand fatigue



Knives that rust or chip after minimal use



Why This Knife Works So Well



The Matsato Premium Chef Knife: Professional Results, Guaranteed



Built for serious home cooks who demand quality:



PRECISION CONTROL



Unique finger hole design gives you perfect balance and control



LASTING SHARPNESS



Ice-hardened stainless steel stays sharp 3x longer than standard knives



SOLID GRIP



Premium beech wood handle prevents slipping, even with wet hands



One knife. Multiple uses. Superior results every time.

Claim Your 70% Off Now!



All contents of this email should be considered as advertisement or promotion. If you decide you don't want to receive emails from us please click here to unsubscribe from these promotional emails.



UAB Convenity • Gedimino g. 45-7, LT-44239 Kaunas, Lithuania • +4932213260060

Web/SEO/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:48:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU2S-00000000AfW-06kZ

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:47:52 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:47:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f70.google.com ([209.85.218.70]:44266)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNQAi-00000000CG7-0vHY

for sales@nk.ca;

Sun, 01 Nov 2026 01:40:12 -0600

Received: by mail-ej1-f70.google.com with SMTP id a640c23a62f3a-c3f88d2ff28sf175920566b.0

for ; Sun, 01 Nov 2026 00:39:14 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1793518747; cv=pass;

d=google.com; s=arc-20260327;

b=bzLYWwSxoxVJJo+FnVQ9mTHb6g1WHQSTdXfFf2I/RVDegc6423dhXqoDI8bnhYpPOg

wNrkVv8xd3RuFdwRksPKKziz4afl+VfqbeNgYUOmMWQ6J6oAeJM8KuY6qFIeV0E/dmXs

WX7mu4avPFcVANGcehC1R0muCgRnD1vgeNL7je/i2FfbTOSO+lNt1RwY9WrZ55/ak1kA

21sifvbEjpU6g7VuswKLf3TGsXnb/JDKoknfdrZknfRs0EBUoTeJWYgJGEtpq3iPTUVX

iOIzbE2gS+23i4EuxJZNsVagggUfif9fHpKkLM2NGWlUcOm1izHwCeBgeUOEeKd3G+xS

YlIA==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:in-reply-to:references:mime-version:dkim-signature;

bh=+pdsTmz2KNSA4U1RAz193/n/8YxvGK12TI6C7j/Nftk=;

fh=NiLNQGRU7ONmg/kZZbmPOGI7idCAeE5BQR3CcXwtz+M=;

b=Dsqq2E+Kt4rQ8Ap3zh/hFnjjH7ahSMCcvgcAV5FWtS6yUtFyY+Lod3w2Q6h7S5Op9x

hdFwOBCBc6pmVnWcvf6eWHs8UvPhO42L414fpOEC5YW2emYDjPH6ngc8Gf8lIChhlNJs

45WIBHh8RC9kmJu+HUIg6XCD2HKi21bRLbUdGIR+9Ps3lG+O2uju34KlxKxOszFED7mc

qabkNzF4BaBa+y/HPmB3tEhfIdTxDnZYxnfR30Y5vwbaj4nTXFlHEQZhcaCGlbu4WaL6

k3zRo5R1g6clzn2UzOpoOg7eq6kXpGoPEKQxR+uTpirRPcJnY9vanRGv0/Dovycqmxyr

vPtA==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20260707 header.b=jws1C0FI;

arc=pass (i=1);

spf=pass (google.com: domain of olivia58433smith5954@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=olivia58433smith5954@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@vtlrsources.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vtlrsources-com.20260707.gappssmtp.com; s=20260707; t=1793518747; x=1794123547; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:in-reply-to:references:mime-version:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=+pdsTmz2KNSA4U1RAz193/n/8YxvGK12TI6C7j/Nftk=;

b=NtRoqWYCE1qXrQqCc2RKpyXwgU7BqO4oblsUObtt/vNXwNpLKQdzHNOpunIPwz6hbC

wwsrPXSaDg97ZipZEmkfVgC+Y2PgTl3z45AQeV9LxeaslIPGblleZBnzbv05FPjbJ4Q9

pRE8y6wR67Uk2xPGjFGjrlHtp/FlzWPa5F6TaCC87BEyTJd/HmqrA84IcaVQlv8Jws93

OHYK4AdTi5hrSDEqZddlS3hpZVC7XG10QtQKDSlQWeBJKaKJsyGh+aWCvMWCLRmBiHvI

UZzvWa2AdnisJJlGa7mTNc58OQ0pviN5/0BVJzbcCDR4OCP4hc8qTLQ+CdePCUydM6ea

yVjg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793518747; x=1794123547;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-beenthere:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=+pdsTmz2KNSA4U1RAz193/n/8YxvGK12TI6C7j/Nftk=;

b=f9JxLCNNMYQaiddzVsOGPaOazBa3xblaUg9+nVtkBv/3v3f6voM38dndEwEfXJFUDV

vK1zsSmoX1ym/txSJN5YHjHXCErYRTfvlCK9Is8IFbqJNH+MO6lx3E8q+fhCeQt/+kCJ

U+QTCwQWPTVPWZ216Dgk3i+CGcXjKzQ0tBL5E1urdvvzlZeiAubOqTZOLQzR9REJu1X6

gQo2XwK/FKG8mt9evZNvdB3JThXVGGUBoNrZ7YEJw3K36xi74vUxxPo3el8scrkv5Ioo

7cu6LRqqFyt7lmyEDRrddMICZaGZq68QL4TC/zdh6UKQuxufhdrKRimIZNfhlQUeT9tA

YJ0g==

X-Forwarded-Encrypted: i=3; AKwUvBzWPhlACJa/mwu0bwEWrwP7Bcd8CxUxzwAuSgN3UtIgLYudnN1ML65BWoaqOQoFwM8hb66llQ==@nk.ca

X-Gm-Message-State: AFq9FYJKASOp+Ji1WiYsBF7KhjVm1U9k9xqiNzFQg3L2Jq8prXNoPrhx

jNbRK463OW0WynA3r2jnVUgMw7ooibII7YlV2ZFFEjYqHdmUBL4wWf+aB1+MewoMYFI=

X-Received: by 2002:a17:906:f582:b0:c34:e9fe:82ed with SMTP id a640c23a62f3a-c4ca7aac4f0mr575714466b.28.1793518747188;

Sun, 01 Nov 2026 00:39:07 -0700 (PDT)

X-BeenThere: oliviaq2@vtlrsources.com; h="ATskLdeOBz4WloJA/bb62d+PHV+wfAn/U4JW7yHnqwBMesAKvQ=="

Received: by 2002:a05:6402:4515:b0:6a9:bb2a:c005 with SMTP id

4fb4d7f45d1cf-6b4d13bde5fls4115080a12.1.-pod-prod-01-eu; Sun, 01 Nov 2026

00:38:48 -0700 (PDT)

X-Forwarded-Encrypted: i=3; AKwUvBwFXGjTeFxdhf9ibYgyDW0lr4zroOHY8EnfmgNYJqPWTA6HfwoxuOM0sv5mHXS6fE1Fs4J8u/r5cQ==@vtlrsources.com

X-Received: by 2002:a17:907:7b8b:b0:c29:f5d8:9c73 with SMTP id a640c23a62f3a-c4ca7ab30b1mr551454666b.34.1793518727620;

Sun, 01 Nov 2026 00:38:47 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1793518727; cv=pass;

d=google.com; s=arc-20260327;

b=Agt8ENrnjQJOQ8vlYKqBvCxR2CQf0odJXw1cnCUVPPceJCzKKcXKZQT6epri5ojAyk

A12LnqOt1pYrt9C0hwZHzuY++KO+9tqezY3JCqzYxRhjMTXE3UZ/1DrpjBuAKFQOiJ5f

9ncAYUSrf57YJWXG6wVPqbf9atfqaqUadu0SGmjTipLt2aSzWGXwsHKnSeFExlfYa7+d

qkq3dn1V4dRpgytIiZxohkt6D498ubX40zS4nPTByZTBFFYE82whT0D0/g9m0jJnRw7a

lZv4cBgGLJorFiOKnr6VcaMZNrIPwRKkYGKDc2pcTq/K+6zfMO9qWGfbR7NetmrlhAOt

+Zjg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=nj3A3dTvr/5a5ADdBDIpsVcan7pro9kQdUl/wqnqHZA=;

fh=PENgZmje1XTRSkEkzBro2PUiU8JGYwHhAff3UV6uxaw=;

b=X7ZrlBtmbwM6iyPM2h1ufoAbXSCZ2uml+yEVMj9nLGEbO6EsHtf8Hj4CnJF7FVWaxh

+E2L1aVELUTKHMgtWwsIPefrnWwmKwu9qz7N0PEVJ01kwJk07BchNj6jW3ggGv7ddW+o

P1yb89lbRN868hyO77KjAU7M24RVxPix1mxSLVmKNNvv/BhCKWSAgXxuLz/bKEOq1DzF

oHCaMmb+7zCQD3szmBTBNuJCSiFUPlXVoswjiPVwqWglHmes8R/aZPn7uTVqvsOTXiVL

2WkczFM6kSQKOCzhf3Hu+O/u2yjuI2aJaSyW+oXUnOZxPXYHImJ0MFMCaCAjqXL4g/WC

qJ+A==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20260707 header.b=jws1C0FI;

arc=pass (i=1);

spf=pass (google.com: domain of olivia58433smith5954@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=olivia58433smith5954@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@vtlrsources.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 4fb4d7f45d1cf-6b4db8fcf8esor1504828a12.5.2026.11.01.00.38.47

for

(Google Transport Security);

Sun, 01 Nov 2026 00:38:47 -0700 (PDT)

Received-SPF: pass (google.com: domain of olivia58433smith5954@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1793518727; cv=none;

d=google.com; s=arc-20260327;

b=F+53Ev4ex46cGB5ORe2aEGijVyH9Bqhn1PX53e6NxTtzPKeKWCzIlKg04Y81a+nICJ

HkI9/GX43ybnmmassolvEaLfLSe4Sl+5UVPhyBuXtigMBoJXqGneE+qiJJ4xtpvnlZe0

i8iCVqb3BZ75I19fKhEHYAwHJUx2HwLnwgcJRURqywXDCSqR4SWzuMol7XQoGzMWKM1A

/RCmsWOag+b3snIVeDQvAHMCVyn6WT8AsNiPVRdacS1JLe7l8QBiCfR2aVMlrX8gl7kX

KYrl1tyZ/SG/frOTNzO5CEZcjg6v0NwPYuvc8g8Ig18n9dCDrtUc80lI2+9+GwdxdbNQ

QDWQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=nj3A3dTvr/5a5ADdBDIpsVcan7pro9kQdUl/wqnqHZA=;

fh=PENgZmje1XTRSkEkzBro2PUiU8JGYwHhAff3UV6uxaw=;

b=PWXlJlrnq9jWKnzmdmegpmFqbCUZe7lwz6TJ4XJ+Zb6wKpLC3I+/RDV7zcoDtaRGQs

VtBgzL8Sn1uyMZ/KeEGGFYON2I2EAG+DJdZZ9GtE8DMsEonu+3Zd+6GtVu/7sanOM0NT

x0dVken1C6S2kH70xGjaVKPYU+DR4PLwoX9eLOqyXkwaSMkJaDahM1h8DSrxi2R2rlr6

y37D+vsmGEtkVVJlFcw+zLDuSmszqFAD9GW98HKeCbm3hsD1w1s1ERRq7Gaq6FPQN43E

eW93aF8SErqINKGmDE6SAjYbnvRxlyI5+MqjPugIEizpndwR7NEDAMoB4/6cq4zsa3Ee

UrXQ==;

darn=vtlrsources.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Forwarded-Encrypted: i=1; AKwUvByyTshRYEi3OBHPHtV5yhbjpzNYiqdRsWe3/aP6LFR2QSKwqa+cPmmz3XNOBHqyvLNGMZ0iWQdtqw==@vtlrsources.com

X-Gm-Gg: AYBFou3Y9WCpRD/Z9TQzo33TuAsNzNKK6hhLi6BX7Nqg9zu527rBP7/XQY7kpRDZ7cU

V1d3GqtcDO48TaDmlXlP9Z2vMzshKsX6jrRX+a6z4Rdz0Nq4Pt9dO83tlv7aXs/zpsQzhoO1ZZI

HEV5v4J/v8E/yc6yrHU9rCRf/Ssw+3FmJOJmytzs98PSyxfeha9v7VbJIdno119uv0//z/jHNe7

pwo1/pb9uVktx7S6DnzMpOWFutSE/x1/7I97JzuEuADYFKERU8M11HWfxfquoIfLtrKrPU+yoEq

qD/ZyDnjxjB5VskIvwN7NEAv6CY17mZg8z8pWzRW4LLDzlW4dACLoZb3/0pf159CNajdyP87q1v

vEFcYR1UdT7T5uX/9QcKowUfQL30PNO/4IJZrBhnT6td0SrSTgVR6mdhnwQCy4ZQxQmuRppdfK7

gfAq8c/KNPiFPXdInM+rD9I3c8Jj+weR5BvLXhzTiTL0IVfiw3B3QAw9Xe1XjbbBRCatkfFIsM6

pOi5vUp9t1n

X-Received: by 2002:a05:6402:c9:b0:6b4:7b28:858b with SMTP id

4fb4d7f45d1cf-6b4d468a69amr3717862a12.19.1793518727070; Sun, 01 Nov 2026

00:38:47 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Olivia Smith

Date: Sun, 1 Nov 2026 13:08:35 +0530

X-Gm-Features: AclHuK-FhlA3nB1ELueyfg-eQfAyj9OwUhGvHKXwTRYClpswBft-1qRDpCOmsiA

Message-ID:

Subject: Re: Business App Development

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a00a1f065f321e2f"

Bcc: oliviaq2@vtlrsources.com

X-Original-Sender: olivia58433smith5954@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20260707 header.b=jws1C0FI; arc=pass

(i=1); spf=pass (google.com: domain of olivia58433smith5954@gmail.com

designates 209.85.220.41 as permitted sender) smtp.mailfrom=olivia58433smith5954@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@vtlrsources.com

Precedence: list

Mailing-list: list Oliviaq2@vtlrsources.com; contact Oliviaq2+owners@vtlrsources.com

List-ID:

X-Spam-Checked-In-Group: Oliviaq2@vtlrsources.com

X-Google-Group-Id: 192315971599

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,





--000000000000a00a1f065f321e2f

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,



Just a quick reminder about the our last sent mail

We are really looking forward to receive your answer so that we can get to

any final conclusion.



Thanks,

Olivia

On Fri, Oct 30, 2026 at 11:39=E2=80=AFPM Olivia Smith <

olivia58433smith5954@gmail.com> wrote:



> Hi,

>

> Interested in developing your mobile apps or software?

>

> We specialize in:

>

> Food Delivery, Restaurant, Health & Wellness, Enterprise Mobility, Taxi,

> Travel, Logistics, Accessibility, Business Apps, and more.

> Please let me know if you're interested, so I can share work samples,

> project details, and pricing information.

>

> Looking forward to connecting with you.

> Thanks!

>



To unsubscribe from this group and stop receiving emails from it, send an e=

mail to Oliviaq2+unsubscribe@vtlrsources.com.



--000000000000a00a1f065f321e2f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

Just a quick reminder about=

the our last sent mail
We are really looking forward to receive your an=

swer so that we can get to any final conclusion.

Thanks,
Olivia=

=C2=A0

class=3D"gmail_attr">On Fri, Oct 30, 2026 at 11:39=E2=80=AFPM Olivia Smith=

<olivia58433smith5954=

@gmail.com
> wrote:

=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding=

-left:1ex">
Hi,

Interested in developing your mobil=

e apps or software?

We specialize in:

Food Delivery, Restaura=

nt, Health & Wellness, Enterprise Mobility, Taxi, Travel, Logistics, Ac=

cessibility, Business Apps, and more.
Please let me know if you're i=

nterested, so I can share work samples, project details, and pricing inform=

ation.

Looking forward to connecting with you.
Thanks!










To unsubscribe from this group and stop receiving emails from it, send an e=

mail to Oliviaq2+un=

subscribe@vtlrsources.com
.




--000000000000a00a1f065f321e2f--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU2J-00000000Adm-16LC

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:47:43 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:47:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f197.google.com ([209.85.128.197]:60455)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <3VuTmahMNBhk8JA7zCz.Bz16z2D.PPTz1z2.EJ1GH.0G2D1IDGC9.1z@maestro.bounces.google.com>)

id 1xNPcZ-000000008mI-0aDO

for doctor@nk.ca;

Sun, 01 Nov 2026 01:04:53 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-8b2d1b27544so9226717b3.0

for ; Sun, 01 Nov 2026 00:03:57 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=acad-pucrs-br.20260707.gappssmtp.com; s=20260707; t=1793516631; x=1794121431; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=D3qPkN99i7zQP4vJjZb9sF7rXTi4/cCMDk64XKhcftY=;

b=sCHBVAKROAAfCAtPATHx8mk00baT+vtsNlrNk5xMn3PMWevReiORxiaa1wayCAc5Zz

vhsqVEwl4q/25ZuyNpgdVK4GwCPzR3mEgleHMQEzgihwkNRWikZ7ppniq5L7giaEjMDa

lRxAfMVTP6YJ9NkPVowOWeG8i3GQJWGkIn8FUpxLsHqsg3BT5citi237LHJ3PDr8RFxi

b2SiTn1jtK+NiAMkJa0EeJmKejBx45hffPH0n3Dfmny5rpToRiU5IDj1Pz/PbGdag5jC

MVKmqIoYYqIepVw/uZ811Pc8tpU64Bx6QJPPm3Rnm5FEYu5uZ1JT5wIjWka82VnQODsv

+BjA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793516631; x=1794121431;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=D3qPkN99i7zQP4vJjZb9sF7rXTi4/cCMDk64XKhcftY=;

b=G/eUHH21m9/cV9a0XFVCiBx+TTpkF7ElrKNn6KQCXzUlhod/SWfcPO0QjDdHuRMAt8

yl0Cp5oVad8SVthj9tlJ31CNbhvq4a7M7/CFV24MIiwe1KZ/PfKTUcYZJQvw2W9WDpmB

q+AIQtQ6ytRSLlRXKCagWipmJZkPFPH2Fvc/zArpJ8VGPvVwWCAHrt7fiuh5DXxZMW6d

THZo+7aOkyXQQIwLBNsiqH8C/5KHVMChnaAQ+hSt8208SkGC054IDjJqQ1pIBMtaRfmF

OKHb2rcZIelqhLDvzTKdHcQOVXMTsJKjBm8teRcYLyvo7m+FJFPMeTaVaGaWCiH/CQlR

eZIw==

X-Gm-Message-State: APuU4Z/3V9T4lpWj4d4sbPMdc7qrmbRl0WXkRveikF4243+Y0XkKeMzN

R8sLV5QmR/HuIHlZtbDFE1TNT+ch4ypngaCS/e50N4lb0R3nEsqYIG3VgtJsBoJeiCSxpwm0o3C

JLSv7mM+FtJ2YoMSs/vcu/wM=

MIME-Version: 1.0

X-Received: by 2002:a05:690c:4:b0:8b0:f0f6:1476 with SMTP id

00721157ae682-8b2b65af757mr40600137b3.15.1793516630862; Sun, 01 Nov 2026

00:03:50 -0700 (PDT)

Message-ID:

Date: Sun, 01 Nov 2026 07:03:50 +0000

Subject: Laadpaal bij u thuis of op het werk? Helemaal niet duur!

From: Lucas van Dijk

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000ae802f065f31a106"

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hallo, Rijdt u elektrisch of overweegt u de overstap? Dan

is een eigen laadpaal bijna onmisbaar. U laadt 's nachts op aan het goedkoopste

tarief en vertrekt elke ochtend met een volle accu. Benieuwd wat een laadpaal

bij u thuis kost?



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_JS BODY: Odd Letter Triples with JS

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.197 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.197 listed in bl.score.senderscore.com]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.3 PLING_QUERY Subject has exclamation mark and question mark

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.197 listed in list.dnswl.org]

Subject: {SPAM?} Laadpaal bij u thuis of op het werk? Helemaal niet duur!



--000000000000ae802f065f31a106

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hallo,



Rijdt u elektrisch of overweegt u de overstap? Dan is een eigen laadpaal

bijna onmisbaar. U laadt 's nachts op aan het goedkoopste tarief en

vertrekt elke ochtend met een volle accu.



Benieuwd wat een laadpaal bij u thuis kost?



Vraag een prijsopgave aan



Groeten,

Lucas



Uitschrijven | Afmelden





--000000000000ae802f065f31a106

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#222;padding:20px;line-height:1.6">

Hallo,



Rijdt u elektrisch of overweegt u de overstap? Dan is een eigen laadpaal=

bijna onmisbaar. U laadt 's nachts op aan het goedkoopste tarief en vertre=

kt elke ochtend met een volle accu.



Benieuwd wat een laadpaal bij u thuis kost?




7700202eed" style=3D"display:inline-block;padding:13px 26px;background:#264=

653;color:#fff;text-decoration:none;border-radius:5px;font-size:15px">Vraag=

een prijsopgave aan



Groeten,
Lucas




#eee;padding-top:12px">
202eed" style=3D"color:#999">Uitschrijven
|
jn.com#t/p/3c4f9813667700202eed" style=3D"color:#999">Afmelden






ight=3D"1" alt=3D"">

--000000000000ae802f065f31a106--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU2D-00000000AdF-3q4W

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:47:37 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:47:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f69.google.com ([209.85.216.69]:55553)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNPPf-000000007Rj-0Pua

for doctor@nk.ca;

Sun, 01 Nov 2026 00:51:32 -0600

Received: by mail-pj1-f69.google.com with SMTP id 98e67ed59e1d1-3adc5b185bfso2210449a91.3

for ; Sat, 31 Oct 2026 23:50:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=students.unnes.ac.id; s=google; t=1793515831; x=1794120631; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=5JsSuV1UkJopNmknez4in1tOI/WHTJtrJcRf6fGRd8Q=;

b=zjv/o3v/siaBb1X7GLidK6vRGjjgQ3wIn7lZFD6Kl0KBMAYuTGIllgaFlqKnyLP8rM

IxVQS4qAVoNoDK87qol7xqNKoZjfSWNi6T/+RE1fb8Vsj8ZSQhiHoRksn+g9dK+NqfMu

C7tXPipenbcpSbl3ZW1b5P5bpIXtVMFb4mXaK2f9PP0t84TFespI/JeUcVM1m5c+S0MQ

cLZP+zlwSc7zvuuDxTfVaDY8yKog0XoR2UJ/ZeSImbNrz6+0EUZe+AJqyda0WI9n9bEr

eCZfNTkmmsyn60AKhNx+SZ0OL80x1Ht39Nf8G4WFuMl4qF1zfdcVxYmwazIuyuL1q1pN

r9aQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793515831; x=1794120631;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=5JsSuV1UkJopNmknez4in1tOI/WHTJtrJcRf6fGRd8Q=;

b=v4Fufi6qhnmYOyS4NQTgpysibi6FPCreWmLXiFWztLRdl5QgAMYQjGZKjxWS24LJDZ

29v8Ixl4JNPD2i0jg2pf2+JFAKha4uNhXZ2NJ1dAx/x0oRsETZru/f60Dn3+Jd65Ao7g

EcYu2IFae06BPK6ji+POmBHDjvi/P3oGB5eMXqXmPfGFD1/ZQFf2sW8jM6iD55Gk3dx9

IkC32XptzNWxcwVwf/oMrHqAyAHlqtXUXVVlMQhRRWx66kM2WmEndKozfUmChqtn9AQ7

lmidPnWXTJxP/B5mvzeJmJBVCEl2Oe3Flb2sb4ctrsTDL7XIVbo8myR1zgr/Gux5P5H2

ar+A==

X-Gm-Message-State: APuU4Z/9rNIiXMEmlH0DlSjneNfJ8XsOBwSTTghMTe0LS0SJvflMcYvv

oPsnBf0CxLGu3Ztvn2PGvZGwk4404Ts+598IXjce2ySYYOl6O5a6IMYowzCHIB/QDrn5BkNeWjm

7fivArTifxnv696ENJwmZNA80riCbueLPHX6Q40NZFXTktH2sgOUaIVgRzicc8fjxK9iMpcg=

MIME-Version: 1.0

X-Received: by 2002:a05:690e:2047:b0:679:935e:3543 with SMTP id

956f58d0204a3-67ba4c88337mr3235330d50.1.1793515424304; Sat, 31 Oct 2026

23:43:44 -0700 (PDT)

Message-ID:

Date: Sun, 01 Nov 2026 06:43:44 +0000

Subject: Uw oude bed is tot 1.500 euro waard

From: Somnora Inruilactie

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000c3e128065f3159a4"



--000000000000c3e128065f3159a4

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Beste lezer,



Slaapt u al langer dan 8 jaar op hetzelfde matras? Dan is de kans groot dat

uw slaapkwaliteit eronder lijdt.



Bij Somnora kunt u uw oude bed inruilen en ontvangt u tot 1.500 euro

korting op een nieuw slaapsysteem. Inclusief 180 nachten slaapgarantie.



Bereken uw inruilwaarde



Vrijblijvend en binnen 1 minuut.



Hartelijke groet,

Somnora



Uitschrijven | Afmelden





--

---------------------------------------

DISCLAIMER

---------------------------------------



This email may contain

confidential or copyrighted information of UNNES. If you are not the

intended recipient, please do not use or share this email. If received in

error, please notify the sender and delete it. Check for viruses; UNNES is

not liable for virus-related damages.

---------------------------------------









--000000000000c3e128065f3159a4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




:#333;padding:20px;line-height:1.7">

Beste lezer,



Slaapt u al langer dan 8 jaar op hetzelfde matras? Dan is de kans groot =

dat uw slaapkwaliteit eronder lijdt.



Bij Somnora kunt u uw oude bed inruilen en ontvangt u tot 1.500 euro kor=

ting op een nieuw slaapsysteem. Inclusief 180 nachten slaapgarantie.




31ca0096d3" style=3D"display:inline-block;padding:13px 26px;background:#5c4=

d7d;color:#fff;text-decoration:none;border-radius:5px;font-size:15px;font-f=

amily:Arial,sans-serif">Bereken uw inruilwaarde



Vrijblijvend en binnen 1 minuut.



Hartelijke groet,
Somnora




#eee;padding-top:12px">
0096d3" style=3D"color:#999">Uitschrijven
|
jn.com#t/p/3e5767d00131ca0096d3" style=3D"color:#999">Afmelden






ight=3D"1" alt=3D"">




------------------------------<=

wbr>---------
DISCLAIMER

e=3D"text-align:left">
------------------------------=

---------
This email may contain =

confidential or copyrighted information of UNNES. If you are not the intend=

ed recipient, please do not use or share this email. If received in error, =

please notify the sender and delete it. Check for viruses; UNNES is not lia=

ble for virus-related damages.
---=

------------------------------------




--000000000000c3e128065f3159a4--

Stonehaven AV phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 12:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNaE4-000000006Bd-2dI2

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 12:24:16 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 12:24:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [130.49.219.81] (port=42445 helo=stonehaven.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNWi9-00000000OJD-0DeE

for root@mail.nl2k.ab.ca;

Sun, 01 Nov 2026 08:39:07 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=stonehaven.com;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@stonehaven.com;

bh=iXszQIlxx7vPex2rmYIgCydLtyk=;

b=EgsNrHJ7EXXDGRUj33FcrlfmRIRgVHbATZh0r26HhLc04x6k0QrwNROeydlBNLOKmQZzVAk4tEAT

z0LR9BgOybq67kpfgFrQ/HacsOzGYf3OtRqpAcWKHpsxLd+agjSajGuYyWdi9hRdqWd80ibcU62r

Ht89Wb0EH+CyCxY587A=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=stonehaven.com;

b=b+BI2KJbpDh/XLIidg188JOqCbU0rrI7OnRj7TxOvhzaUKYU2DxGPJzKs5TwA2PcgQ6abb5dCRjS

4v6s7kZ7Tr/EPA3424F5amHu/s/N5KUpXtg1T4rOHpTTPBltMO7d5pXVjxRJN8KK4tPUPF7vlabk

FGMcpkBTFDlupgStvvU=;

Date: 11-01-2026

From: Antivirus Alerts

To: root@mail.nl2k.ab.ca

Cc: root@mail.nl2k.ab.ca

Subject: Confirm your Antivirus Renewal

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100218cbff5f80e-351cfa4d-48ec-4861-b2h8-6fbb151cmf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Keep your Devices Safe Now



Content analysis details: (14.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

3.5 VIRUS_WARNING62 'From' indicates unhelpful 'virus warning' (62)

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[130.49.219.81 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.49.219.81 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

Subject: {SPAM?} Confirm your Antivirus Renewal

















Keep your Devices Safe Now






















style="width:100%; height:auto; max-width:593px;"

border="0" usemap="#wxj8">





















style="width:100%; height:auto; max-width:500px;"

border="0" usemap="#aZx4">
























Stonehaven AV phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 12:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNaDw-000000006Aj-3AOy

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 12:24:08 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 12:24:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [130.49.219.81] (port=43415 helo=stonehaven.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNWi9-00000000OLM-0Dh3

for root@nl2k.ab.ca;

Sun, 01 Nov 2026 08:39:07 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=stonehaven.com;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@stonehaven.com;

bh=qIqmGmx92DeVxhrYphHk7+VopBI=;

b=wR1zT96SZBfwNWykioxv1rCbnllTMeVETYGk2srJgSewmwQRLn+PBaDECD9Bazwsv3y3wupEdTFQ

a9MrXkWwfFC4aljLtmsD8o78MMtqfogMlqXkbii1fffmn+ChlqyNuBroxriwpzGfBnNEkG92OYEk

K/OZWTJ88XYEtVQtLUk=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=stonehaven.com;

b=BiwOzsk97NwsBRAwIBRlxefwOdvEJ9P/xTqE8GAv3ehuL2q9meoeOFUQpzPfvqvjviNpcplNWhvj

V2O/Pa00XP6u5Ef+zTjdbUB3KRU0SJO99H7AV7CCL/6bcQWgFZKzLIMLvItoyENw2OdEM8M96CnK

+ByEFIrukMudDnap/S0=;

Date: 11-01-2026

From: Antivirus Alerts

To: root@nl2k.ab.ca

Cc: root@nl2k.ab.ca

Subject: Confirm your Antivirus Renewal

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100218cbff5f80e-351cfa4d-48ec-4861-b2h8-6fbb151cmf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Keep your Devices Safe Now



Content analysis details: (14.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

3.5 VIRUS_WARNING62 'From' indicates unhelpful 'virus warning' (62)

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[130.49.219.81 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.49.219.81 listed in bl.score.senderscore.com]

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

Subject: {SPAM?} Confirm your Antivirus Renewal

















Keep your Devices Safe Now






















style="width:100%; height:auto; max-width:593px;"

border="0" usemap="#wxj8">





















style="width:100%; height:auto; max-width:500px;"

border="0" usemap="#aZx4">
























Stonehaven AV Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 12:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNaDp-0000000069Z-0Utb

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 12:24:01 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 12:24:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [130.49.219.81] (port=43415 helo=stonehaven.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNWiM-00000000OLM-3sHz

for games@nl2k.ab.ca;

Sun, 01 Nov 2026 08:39:13 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=stonehaven.com;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@stonehaven.com;

bh=5fhOjgu8SZvFvDzTU+A/PGXTuo0=;

b=TAAgRZfOdaDWuOHOy+9UTuYlHdw6uBCipeMr+2yNVClCyMWJcxlrUDVN7VIrJHGjwtqNan5bMQPi

miRoTyNAym1ej6qvw6YHFX9wO9bItJVbvO0gSG4KvRJyEfa0Pte/+8cOrmQPDx1alEelmFuKMpvZ

qVgVXQni3yq/vI9gzQs=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=stonehaven.com;

b=AbmGf4KHC4ImjoYav2JgRHA4hVGHyqwDceiDR4v6zed3F05t3LNciYVOOmc2n6ppK8SxRNMu1E7F

EWcl184gdCkoFxM2UeIo3JLr17aBdt4RYDRj0WyDoMqUWgR3dtYnsiY0/XQTRVgIaXbOSAEeUsM7

YQR7CTLyCxkYdUgiy9g=;

Date: 11-01-2026

From: Antivirus Alerts

To: games@nl2k.ab.ca

Cc: games@nl2k.ab.ca

Subject: Confirm your Antivirus Renewal

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100218cbff5f80e-351cfa4d-48ec-4861-b2h8-6fbb151cmf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Keep your Devices Safe Now



Content analysis details: (14.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[130.49.219.81 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.49.219.81 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

3.5 VIRUS_WARNING62 'From' indicates unhelpful 'virus warning' (62)

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Confirm your Antivirus Renewal

















Keep your Devices Safe Now






















style="width:100%; height:auto; max-width:593px;"

border="0" usemap="#wxj8">





















style="width:100%; height:auto; max-width:500px;"

border="0" usemap="#aZx4">
























Stonehaven AV Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 12:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNaDt-000000006A3-0CsX

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 12:24:05 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 12:24:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [130.49.219.81] (port=50047 helo=stonehaven.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNWi9-00000000OLN-0DbC

for support@nk.ca;

Sun, 01 Nov 2026 08:39:11 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=stonehaven.com;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@stonehaven.com;

bh=goU/QNY2yv3pX6S6njgsQ23bU10=;

b=NdmeDBlZyUO0CYSq82AHaPo+VtKCvy75GAvjeVDL7cqc4WUx4FJhQEFqWC5V/BKWYCqZ2qT3X/ir

deDGy4fJv4KfoI6YtvWOSZReq1gbryrzLNxdGnJe+W3TmOXC508DjVN1vhKup1TGLPn200BsSuyH

lLId6uqz3IVUYFYIOAA=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=stonehaven.com;

b=YUPPsFWVCYnbSoCYSe2tODq35ZcKtzoSws0ui6B3Dyac5xGt/AMd8wcRIB8c/nNsib6Ng58aBDQE

4YEtMjWz0atZqwaYnzwguKLjMqyx3nvWqsKHOwVLetK5A8llq9Ncu33YzTQzGAhGYdAcQfBgGg3P

xFt4WCi93rI+7x2OF9c=;

Date: 11-01-2026

From: Antivirus Alerts

To: support@nk.ca

Cc: support@nk.ca

Subject: Confirm your Antivirus Renewal

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100218cbff5f80e-351cfa4d-48ec-4861-b2h8-6fbb151cmf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Keep your Devices Safe Now



Content analysis details: (14.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[130.49.219.81 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.49.219.81 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

3.5 VIRUS_WARNING62 'From' indicates unhelpful 'virus warning' (62)

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Confirm your Antivirus Renewal

















Keep your Devices Safe Now






















style="width:100%; height:auto; max-width:593px;"

border="0" usemap="#wxj8">





















style="width:100%; height:auto; max-width:500px;"

border="0" usemap="#aZx4">
























Stonehaven AV Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 08:40:00 -0600

Received: from [130.49.219.81] (port=43415 helo=stonehaven.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNWiI-00000000OLM-0zwN

for dave@nl2k.ab.ca;

Sun, 01 Nov 2026 08:39:12 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=stonehaven.com;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@stonehaven.com;

bh=QeRpKvTR/pwEynBAxMSBniTo/iM=;

b=AYqYAat46eXtRdX6O6pICsn8e7x1UJAttpS3fb5s5njYb/79xghZemeiNv/6LyPupL1YIJ5BdzP+

d/C98QAWH5chDTB59cXDlerWvOvxS2Q/jZ58btu2vyfViIgV8O5NqXnTWHJCdfOA7+QgqQKA9V3x

VgNTHo6KJfDDtnezLmc=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=stonehaven.com;

b=hS2q4bBl8kPEVVsqfrBfrwvH+stLDGSADBrb6SFIDauqHXCcfwu5Bck7jnnpQE1m+CMvaRfZkxIL

b8ohY7QzVPGBsDJ58pczLRrsBI1Cy4QXV/o8oZHT+MTS6mKXHis4umPrFrkpYI4wrYPZG6QLsU6d

NGdegnP6nDlJ/bMwokg=;

Date: 11-01-2026

From: Antivirus Alerts

To: dave@nl2k.ab.ca

Cc: dave@nl2k.ab.ca

Subject: Confirm your Antivirus Renewal

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100218cbff5f80e-351cfa4d-48ec-4861-b2h8-6fbb151cmf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Keep your Devices Safe Now



Content analysis details: (14.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[130.49.219.81 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.49.219.81 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

3.5 VIRUS_WARNING62 'From' indicates unhelpful 'virus warning' (62)

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

Subject: {SPAM?} Confirm your Antivirus Renewal

















Keep your Devices Safe Now






















style="width:100%; height:auto; max-width:593px;"

border="0" usemap="#wxj8">





















style="width:100%; height:auto; max-width:500px;"

border="0" usemap="#aZx4">
























Stonehaven AV phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 12:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNaEQ-000000006FM-2Opx

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 12:24:38 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 12:24:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [130.49.219.81] (port=49575 helo=stonehaven.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNWkE-00000000OVc-00gj

for doctor@nl2k.ab.ca;

Sun, 01 Nov 2026 08:41:15 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=stonehaven.com;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@stonehaven.com;

bh=DnTKqhmJo+V2D0ketCrO8UGrqAY=;

b=qHFTDYRpyQ6rAoSA9eJClLcmlMIz1NS5mKjE5gJ7AwRnfiZOGxoRC94esk8CW25G/1FSnPODV1gC

mzB+AO+X7E/2MmcWeiSOsua7U3TwO+Ukh4SVfxcw4l+uYD2SegGFy/4g+lcQD6pD+PXY6V6YX2Ti

ycLaoR0YlaqnQydTB5w=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=stonehaven.com;

b=Q3boZqGUXsI9C3dAC1Tek4g1vr5n3EayhPbQMDHeoFfy1V8w6RHGO+pak7toJ/h/WCv41tbPCkPN

xeWhQbD24YZzO10Kfzv4n0AErRqkjnUlDohr7arOtDySCzYyZh092P7scdbKLaf1k8zjW/d2bFaL

BAG08WrwaeYrkY0+HHk=;

Date: 11-01-2026

From: Antivirus Alerts

To: doctor@nl2k.ab.ca

Cc: doctor@nl2k.ab.ca

Subject: Confirm your Antivirus Renewal

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100218cbff5f80e-351cfa4d-48ec-4861-b2h8-6fbb151cmf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Keep your Devices Safe Now



Content analysis details: (14.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[130.49.219.81 listed in bb.barracudacentral.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

3.5 VIRUS_WARNING62 'From' indicates unhelpful 'virus warning' (62)

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

0.0 T_REMOTE_IMAGE Message contains an external image

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.49.219.81 listed in bl.score.senderscore.com]

Subject: {SPAM?} Confirm your Antivirus Renewal

















Keep your Devices Safe Now






















style="width:100%; height:auto; max-width:593px;"

border="0" usemap="#wxj8">





















style="width:100%; height:auto; max-width:500px;"

border="0" usemap="#aZx4">
























dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 05:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNU22-00000000AcV-09La

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 05:47:26 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 05:47:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f198.google.com ([209.85.221.198]:48413)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNON4-0000000019r-12FD

for doctor@nk.ca;

Sat, 31 Oct 2026 23:44:48 -0600

Received: by mail-vk1-f198.google.com with SMTP id 71dfb90a1353d-5c7c0d2b0aaso358583e0c.1

for ; Sat, 31 Oct 2026 22:43:52 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=life-ac-th.20260707.gappssmtp.com; s=20260707; t=1793511826; x=1794116626; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=jsT8wrQ2uwQ+iR5OQUKOqxBW4W/ez+UH83fH5MSScfM=;

b=osYsim2pqqdHQSOS7hNXK3KOaKuOP3NWs3IU8xILre6y2d3wa9IsAm0WAZ2AGPhtCD

02n3egqAnlp9nRbHSdDkcFTURFijOxdH3jwobu4WcTP+KharYkzJ+HUBzX2TCotRqofA

O6I2MkucEctJFvkMiTvRofNJ1Zsa052gjysBtn4KRs5D0098eaqpBaFKxNXXA9uq5FF9

iCAZpVaTnD+F1diSjQCLeEBnc8bgGrqWS2qMTTk1aMGRTA+3hsRgsXxqRCF/QBk73h+W

tro9Qwj6RtLL1tGmylmtCr+7lztI7dtvBTS5FDb4+zlX37BZVMEEjCJGlZlZvNVyDuaf

qxBg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793511826; x=1794116626;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=jsT8wrQ2uwQ+iR5OQUKOqxBW4W/ez+UH83fH5MSScfM=;

b=DKArCRSX84/VynKytjXZsqzC2sjMPO1ugv4fTlyPfuBnPjYPPRGjw9GZqSA/IKZfg6

1KhQKcRt7ofY17NSQFxqLOPhTSdxepfeaAEr4OUbLVZRFWYTAL7OzH8pCKjlfJ7a+snv

WfmJLQEUvxPob56aSbdsepwu2h6tBdjWXeBgZyo7dWCOy8CAKq6xWbwvhtJHYJqbr28n

cEdHPltYyeXXY5u5iI0w7ogvR/xfSa5i0EcZfVacGVPRTPC20IS5r7dTWaA0rfs90tGs

GM/xtwDn0Swv4V9rnNgEQDt9UoWXB2R0BVzcODhyUqf+2pJofPF8ee4lZufTSq5k4tic

NzXg==

X-Gm-Message-State: AFq9FYL1/8Lv9imkwRavEwqlIwGfhVCLq9RLd2YTTXltvbiNfuFZ+ghN

SNs5Mx1DviCsjn1ji/5vDBIq+Ph0A87E5ES1WgGENFdJXW83HGPiOBD1AOr2wrgsBiEnnt3tpuk

y4jh1aZl/PONlX9XMNBst9O2m

MIME-Version: 1.0

X-Received: by 2002:a05:6102:6058:b0:7cc:95ed:30c9 with SMTP id

ada2fe7eead31-7d0726402e2mr2098128137.29.1793511826155; Sat, 31 Oct 2026

22:43:46 -0700 (PDT)

Message-ID:

Date: Sun, 01 Nov 2026 05:43:46 +0000

Subject: Nieuw! Een thuisbatterij voor uw zonnepanelen!

From: Sophie Spoelstra

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000004c7d2c065f3083cd"



--0000000000004c7d2c065f3083cd

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Beste lezer,



Heeft u zonnepanelen? Dan weet u dat u overdag stroom opwekt die u 's

avonds niet meer heeft.



Een thuisbatterij slaat die stroom op zodat u hem later gebruikt.

Resultaat: lagere energierekening en minder afhankelijkheid van het net.



Benieuwd of het iets voor u is?



Vraag gratis informatie aan



Hartelijke groet,

Sophie



Uitschrijven | Afmelden





--0000000000004c7d2c065f3083cd

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#222;padding:20px;line-height:1.6">

Beste lezer,



Heeft u zonnepanelen? Dan weet u dat u overdag stroom opwekt die u 's av=

onds niet meer heeft.



Een thuisbatterij slaat die stroom op zodat u hem later gebruikt. Result=

aat: lagere energierekening en minder afhankelijkheid van het net.



Benieuwd of het iets voor u is?




b6921c81e9" style=3D"display:inline-block;padding:13px 26px;background:#1b4=

332;color:#fff;text-decoration:none;border-radius:5px;font-size:15px">Vraag=

gratis informatie aan



Hartelijke groet,
Sophie




#eee;padding-top:12px">
1c81e9" style=3D"color:#999">Uitschrijven
|
in.com#t/p/f50a876c32b6921c81e9" style=3D"color:#999">Afmelden






ight=3D"1" alt=3D"">

--0000000000004c7d2c065f3083cd--