costco phish
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 09 Apr 2026 12:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1wAuFo-000000008gv-0Um6
for dave@doctor.nl2k.ab.ca;
Thu, 09 Apr 2026 12:37:24 -0600
Resent-From: The Doctor
Resent-Date: Thu, 9 Apr 2026 12:37:24 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [213.176.16.238] (port=52191 helo=weslandbol.nl)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))
id 1wAtIK-000000004dJ-0msX
for games@nl2k.ab.ca;
Thu, 09 Apr 2026 11:36:00 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;
h=Date:To:From:Subject:Content-Type:Mime-Version:Content-Transfer-Encoding; i=games@nl2k.ab.ca;
bh=rfR57kAMZb2RIy0iE3BOyHJHMLI=;
b=Gn6LMBwBxxTvY4s7bqTshVBsgJqy7rNQkDFziNbXjanajT/Xz+M0Lg7vGdTcqodHvw5/hroLJ36c
G6J6HfQtkwSX937k6RkQv2ndWpPGqMf3HT1MpdHPUnFIaRRvunQP0m3Zk8Ck92t5h12dLJY0Kcfj
EkctAE7wr6DJIb1yWxelsFpxaDXL4TRdv6Ow5AlYWst3UIdJU4Pv6Z5W57pU9RCAv97rOrx3UvJZ
EvzIrAB7EUWEi8TwyxEF4ep1M+7GbL4l5iSTeP/H/Lj787bD0Wq6GN+iXH7cBYFC9DWevl9AZTu9
pgLctQoYHhATleHgLwYGyz0iBXzwwUtUWE+zdQ==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;
b=nSaD9sDg/F+I5ZSIQ27JZg+MaU2tBKwpxx7p54vsIyeUAquwNnYnX31ycGMEA5o3x45RzSSUXxau
G1ySGJ9ZZKs9L20leFoSoFT7YzIOedal7BwqDIGJjSyM32BFVX0M1HjQGAD2YpIbWBp34aMl5TfB
SRe77eDObcBS5ClIe5lagTAKiuH49qL3byDH+TFO3Egb/hTd98z5NZyowxBSoXhBTJtnuwLgBdyh
0KWdVMU8KzPAdBLj0vqDMRTENl3at4j7vvwW06AJAI/FnN89jyzzRmVJmo/Gzx7PEXUGdw/9q2sG
stDW7qseVjhzVYqYy0UrQ81kb3jSdiwZwO0LCg==;
Date: Thu, 09 Apr 2026 17:34:54 +0000
To: games@nl2k.ab.ca
From: FinalNotice
Subject: Confirmation Needed
Content-Type: text/html; charset="UTF-8"
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam_score: 10.7
X-Spam_score_int: 107
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: CLICK HERE Unsubscribe 115 E 23rd St New York, NY, US 10010
Content analysis details: (10.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
[213.176.16.238 listed in dnsbl.ahbl.org]
[213.176.16.238 listed in dnsbl.ahbl.org]
[213.176.16.238 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.3 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
2.2 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
Subject: {SPAM?} Confirmation Needed
CLICK HERE
Unsubscribe
115 E 23rd St New York, NY, US 10010
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 09 Apr 2026 12:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1wAuFo-000000008gv-0Um6
for dave@doctor.nl2k.ab.ca;
Thu, 09 Apr 2026 12:37:24 -0600
Resent-From: The Doctor
Resent-Date: Thu, 9 Apr 2026 12:37:24 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [213.176.16.238] (port=52191 helo=weslandbol.nl)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))
id 1wAtIK-000000004dJ-0msX
for games@nl2k.ab.ca;
Thu, 09 Apr 2026 11:36:00 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;
h=Date:To:From:Subject:Content-Type:Mime-Version:Content-Transfer-Encoding; i=games@nl2k.ab.ca;
bh=rfR57kAMZb2RIy0iE3BOyHJHMLI=;
b=Gn6LMBwBxxTvY4s7bqTshVBsgJqy7rNQkDFziNbXjanajT/Xz+M0Lg7vGdTcqodHvw5/hroLJ36c
G6J6HfQtkwSX937k6RkQv2ndWpPGqMf3HT1MpdHPUnFIaRRvunQP0m3Zk8Ck92t5h12dLJY0Kcfj
EkctAE7wr6DJIb1yWxelsFpxaDXL4TRdv6Ow5AlYWst3UIdJU4Pv6Z5W57pU9RCAv97rOrx3UvJZ
EvzIrAB7EUWEi8TwyxEF4ep1M+7GbL4l5iSTeP/H/Lj787bD0Wq6GN+iXH7cBYFC9DWevl9AZTu9
pgLctQoYHhATleHgLwYGyz0iBXzwwUtUWE+zdQ==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;
b=nSaD9sDg/F+I5ZSIQ27JZg+MaU2tBKwpxx7p54vsIyeUAquwNnYnX31ycGMEA5o3x45RzSSUXxau
G1ySGJ9ZZKs9L20leFoSoFT7YzIOedal7BwqDIGJjSyM32BFVX0M1HjQGAD2YpIbWBp34aMl5TfB
SRe77eDObcBS5ClIe5lagTAKiuH49qL3byDH+TFO3Egb/hTd98z5NZyowxBSoXhBTJtnuwLgBdyh
0KWdVMU8KzPAdBLj0vqDMRTENl3at4j7vvwW06AJAI/FnN89jyzzRmVJmo/Gzx7PEXUGdw/9q2sG
stDW7qseVjhzVYqYy0UrQ81kb3jSdiwZwO0LCg==;
Date: Thu, 09 Apr 2026 17:34:54 +0000
To: games@nl2k.ab.ca
From: FinalNotice
Subject: Confirmation Needed
Content-Type: text/html; charset="UTF-8"
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam_score: 10.7
X-Spam_score_int: 107
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: CLICK HERE Unsubscribe 115 E 23rd St New York, NY, US 10010
Content analysis details: (10.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
[213.176.16.238 listed in dnsbl.ahbl.org]
[213.176.16.238 listed in dnsbl.ahbl.org]
[213.176.16.238 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[213.176.16.238 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
[213.176.16.238 listed in will-spam-for-food.eu.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.3 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
2.2 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
Subject: {SPAM?} Confirmation Needed
Unsubscribe
115 E 23rd St New York, NY, US 10010