Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 04 Oct 2026 13:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDRRE-00000000JuH-26JB

for dave@doctor.nl2k.ab.ca;

Sun, 04 Oct 2026 12:59:56 -0600

Resent-From: The Doctor

Resent-Date: Sun, 4 Oct 2026 12:59:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f72.google.com ([209.85.219.72]:55741)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDPHl-00000000P4q-3yJr

for doctor@nk.ca;

Sun, 04 Oct 2026 10:41:37 -0600

Received: by mail-qv1-f72.google.com with SMTP id 6a1803df08f44-91064f6e75bso28256776d6.3

for ; Sun, 04 Oct 2026 09:40:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=student-unsrat-ac-id.20251104.gappssmtp.com; s=20251104; t=1791132002; x=1791736802; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=qZNvkIF0kN8K6nyob6Ir+/IgBqJly6o3YubXuHVpTUE=;

b=iS/SZEDCY1JKi+I92KN2PKQQg4YWEHepaw7xOSMDCE/L1+LuVo+Vbm9Gj48qKeRAoL

E2drWDBQKUx1NX+NLA+yDnN3xfKwqie4Y+z6QzbwnblM0uMsIT9ugs1fX9AUn8EajBEG

vTKzt6N6Ggh/tR8BKtDb80suAlr8gvZxZrjWaFySwxjSxPRFKdeLUbjyNJdBDrfuzUtw

i5kRtMQ/dXRbKa1veWUTA5ONDwr+f3WtZjFO3ez6L7HzeBPpwgHoIgOKMmZQZhQcH9xL

yepbZVIpmFzSvlACzCCXoxhQujGNMEDzf+X63N8/hXS2etbEOtOOkz8OS8tzCuyRaHHL

XHEQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791132002; x=1791736802;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=qZNvkIF0kN8K6nyob6Ir+/IgBqJly6o3YubXuHVpTUE=;

b=lCheZdSbs/mia8PVSSNVo+6BPYF332Obkp010mwgXRIJoLiFAStxpAkCLH/Ya7EYB5

F99hlDxNLFNd4a99EAo/7mkMqHmDS3Mtzk+j4wAKbknXPsHkwrgxpMniF31DvdAcQRYA

QUPGUkhr+ioOsABqW0h5LkYpHMuc0V/cQ0hcFzluS2PZ7WHUqNi6wdrujXS8ljbFs2pD

jjhoyxL3tT2n1O6vffJYj6vV7Ul5zBTYFPWGXpmcZvoxyBj/bDJ6UWc47B65QtePWFpS

XAxlKjpr+7KypUwxlo04Uihmkv+CglokRmQjimdEJ9zyp82geCa8WLyvujZ0TnRhpeBM

LK5A==

X-Gm-Message-State: AFq9FYJBZRatBFCyOVBljKIzCpEPW2EFhNhm8XDEAs02/+reXSHJgKls

4joLPcfN/3UsTDzOgaaTAE61t90pF1DLv881hlL2P8y7lPq0F+zpyk4jRKmLXrssIsVIj6vJwSP

CcS/PugPp/Phf5WoBF/vlri9B

MIME-Version: 1.0

X-Received: by 2002:a05:6214:d6f:b0:915:e732:33b4 with SMTP id

6a1803df08f44-917c009e2cfmr166779806d6.19.1791132001789; Sun, 04 Oct 2026

09:40:01 -0700 (PDT)

Message-ID:

Date: Sun, 04 Oct 2026 16:40:01 +0000

Subject: Warmtepomp met subsidie: bekijk uw mogelijkheden

From: Warmtepomp Advies NL

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000b67c01065d066af6"

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Warmtepomp Advies NL Onafhankelijk energieadvies Lagere energierekening

Bespaar op gas en verwarm comfortabel met een warmtepomp



Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.72 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: klclick.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: businesssnap.xyz]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: businesssnap.xyz]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.72 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.72 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: businesssnap.xyz (xyz)]

0.1 TW_IK BODY: Odd Letter Triples with IK

0.1 TW_JB BODY: Odd Letter Triples with JB

0.1 TW_JK BODY: Odd Letter Triples with JK

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Warmtepomp met subsidie: bekijk uw mogelijkheden

X-Antivirus: AVG (VPS 261004-6, 10/4/2026), Inbound message

X-Antivirus-Status: Clean



--000000000000b67c01065d066af6

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



V2FybXRlcG9tcCBBZHZpZXMgTkwgT25hZmhhbmtlbGlqayBlbmVyZ2llYWR2aWVzDQoNCg0KDQoN

Cg0KTGFnZXJlIGVuZXJnaWVyZWtlbmluZw0KDQpCZXNwYWFyIG9wIGdhcyBlbiB2ZXJ3YXJtIGNv

bWZvcnRhYmVsIG1ldCBlZW4gd2FybXRlcG9tcA0KDQpTdGVlZHMgbWVlciBodWlzaG91ZGVucyBp

biBOZWRlcmxhbmQgc3RhcHBlbiBvdmVyLiBFZW4gd2FybXRlcG9tcCBrYW4gdXcgIA0KZ2FzdmVy

YnJ1aWsgZmxpbmsgdmVybGFnZW4g4oCUIGVuIG1ldCBkZSBJU0RFLXN1YnNpZGllIGlzIGVlbiBk

ZWVsIHZhbiBkZSAgDQprb3N0ZW4gbW9nZWxpamsgdGUgdmVyZ29lZGVuLg0KDQoNCg0KDQoNCldp

bHQgdSB3ZXRlbiBvZiBlZW4gd2FybXRlcG9tcCBiaWogdXcgd29uaW5nIHBhc3Q/IERvZSBkZSBn

cmF0aXMgZW4gIA0KdnJpamJsaWp2ZW5kZSBjaGVjay4gVSBvbnR2YW5ndCBlZW4gaW5kaWNhdGll

IHZhbiBkZSBtb2dlbGlqa2UgYmVzcGFyaW5nLCAgDQpnZXNjaGlrdGUgc3lzdGVtZW4gZW4gd2Vs

a2Ugc3Vic2lkaWUgdm9vciB1dyBzaXR1YXRpZSBiZXNjaGlrYmFhciBrYW4gemlqbi4NCg0KDQoN

Cg0KDQrinJQgTGFnZXIgZ2FzdmVyYnJ1aWsNCk1pbmRlciBhZmhhbmtlbGlqayB2YW4gZ2FzLCBt

ZXQgZWVuIGluZGljYXRpZWYgbGFnZXJlIGVuZXJnaWVyZWtlbmluZy4NCg0K4pyUIElTREUtc3Vi

c2lkaWUgbW9nZWxpamsNClZvb3IgdmVlbCB3YXJtdGVwb21wZW4ga3VudCB1IG1vZ2VsaWprIElT

REUtc3Vic2lkaWUgYWFudnJhZ2VuLiBCZWRyYWdlbiBlbiAgDQp2b29yd2FhcmRlbiB6aWpuIGFm

aGFua2VsaWprIHZhbiB1dyBzaXR1YXRpZS4NCg0K4pyUIE1lZXIgY29tZm9ydA0KQWFuZ2VuYW1l

LCBnZWxpamttYXRpZ2Ugd2FybXRlIGVuIGluIGRlIHpvbWVyIHZhYWsgb29rIGtvZWxpbmcuDQoN

CuKclCBHcmF0aXMgJiB2cmlqYmxpanZlbmQNCkRlIGNoZWNrIGlzIGtvc3RlbG9vcyBlbiB6b25k

ZXIgdmVycGxpY2h0aW5nZW4uDQoNCg0KDQoNCg0KRG9lIGRlIGdyYXRpcyB3YXJtdGVwb21wLWNo

ZWNrIMK7DQoNCg0KDQpWcmlqYmxpanZlbmQgwrcgZ2VlbiBrb3N0ZW4gwrcgYmlubmVuIDIgbWlu

dXRlbiBpbmdldnVsZA0KDQoNCg0KDQoNCk9udGRlayBpbiBlZW4gcGFhciBzdGFwcGVuIG9mIHV3

IHdvbmluZyBnZXNjaGlrdCBpcyBlbiB3ZWxrZSBzdWJzaWRpZSAgDQptb2dlbGlqayBpcy4NCg0K

DQoNCg0KDQpHZW5vZW1kZSBiZWRyYWdlbiBlbiBiZXNwYXJpbmdlbiB6aWpuIGluZGljYXRpZWYg

ZW4gYWZoYW5rZWxpamsgdmFuIHV3ICANCndvbmluZywgZW5lcmdpZXZlcmJydWlrIGVuIHBlcnNv

b25saWprZSBzaXR1YXRpZS4gU3Vic2lkaWUgKHpvYWxzIElTREUpIGlzICANCm1vZ2VsaWprIG1h

YXIgbmlldCBnZWdhcmFuZGVlcmQ7IHRvZWtlbm5pbmcgZW4gdm9vcndhYXJkZW4gd29yZGVuIGJl

cGFhbGQgIA0KZG9vciBkZSBiZXRyZWZmZW5kZSBpbnN0YW50aWUuIERpdCBpcyBnZWVuIGFhbmJv

ZCBuYW1lbnMgZGUgb3ZlcmhlaWQuDQoNClUgb250dmFuZ3QgZGV6ZSBlLW1haWwgb21kYXQgdSB6

aWNoIGhlZWZ0IGFhbmdlbWVsZCB2b29yIGluZm9ybWF0aWUgb3ZlciAgDQp3b25lbiBlbiBlbmVy

Z2llLg0KDQpVaXRzY2hyaWp2ZW4NCg0KDQoNCg0K

--000000000000b67c01065d066af6

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"margin:0;padding:0;background-color:#e8f2f4;">










ing=3D"0" border=3D"0" style=3D"width:600px;max-width:600px;background-colo=

r:#ffffff;border-radius:14px;overflow:hidden;border:1px solid #cfe2e6;">










































































=3D"left">


ellspacing=3D"0" border=3D"0">










s-serif;font-size:17px;font-weight:bold;color:#ffffff;letter-spacing:0.3px;=

">

Warmtepomp Advies NL
ns-serif;font-size:12px;color:#8fd0dc;">

Onafhankelijk energieadvies



;" align=3D"left">


ellspacing=3D"0" border=3D"0">




















s-serif;font-size:13px;font-weight:bold;color:#d5f4fa;text-transform:upperc=

ase;letter-spacing:1.5px;padding-bottom:10px;">

Lagere energierekening

s-serif;font-size:29px;line-height:36px;font-weight:bold;color:#ffffff;padd=

ing-bottom:12px;">

Bespaar op gas en verwarm comfortabel met een warmtepomp

s-serif;font-size:16px;line-height:24px;color:#eafafd;">

Steeds meer huishoudens in Nederland stappen over. Een wa=

rmtepomp kan uw gasverbruik flink verlagen — en met de ISDE-subsidie =

is een deel van de kosten mogelijk te vergoeden.





ellspacing=3D"0" border=3D"0">








s-serif;font-size:16px;line-height:25px;color:#274651;">

Wilt u weten of een warmtepomp bij uw woning past? Doe de=

gratis en vrijblijvende check. U ontvangt een indicatie van de mogelijke b=

esparing, geschikte systemen en welke subsidie voor uw situatie beschikbaar=

kan zijn.





ellspacing=3D"0" border=3D"0">


























Helvetica,sans-serif;font-size:22px;color:#1499b0;padding:8px 0;">✔<=

/td>


s-serif;font-size:15px;line-height:22px;color:#274651;padding:8px 0;border-=

bottom:1px solid #e2eef1;">

Lager gasverbruik
Minder afhankelijk =

van gas, met een indicatief lagere energierekening.

Helvetica,sans-serif;font-size:22px;color:#1499b0;padding:8px 0;">✔<=

/td>


s-serif;font-size:15px;line-height:22px;color:#274651;padding:8px 0;border-=

bottom:1px solid #e2eef1;">

ISDE-subsidie mogelijk
Voor veel warm=

tepompen kunt u mogelijk ISDE-subsidie aanvragen. Bedragen en voorwaarden z=

ijn afhankelijk van uw situatie.

Helvetica,sans-serif;font-size:22px;color:#1499b0;padding:8px 0;">✔<=

/td>


s-serif;font-size:15px;line-height:22px;color:#274651;padding:8px 0;border-=

bottom:1px solid #e2eef1;">

Meer comfort
Aangename, gelijkmatige =

warmte en in de zomer vaak ook koeling.

Helvetica,sans-serif;font-size:22px;color:#1499b0;padding:8px 0;">✔<=

/td>


s-serif;font-size:15px;line-height:22px;color:#274651;padding:8px 0;">

Gratis & vrijblijvend
De check is=

kosteloos en zonder verplichtingen.





" border=3D"0">








dius:8px;">


J36RX5JNAPV4X2XB_11#t/c/5bdd2ca95b84be51dc2f" style=3D"display:inline-block=

;font-family:Arial,Helvetica,sans-serif;font-size:18px;font-weight:bold;col=

or:#ffffff;text-decoration:none;padding:16px 40px;border-radius:8px;">

Doe de gratis warmtepomp-check »



ellspacing=3D"0" border=3D"0">








ans-serif;font-size:13px;line-height:19px;color:#5b7078;padding-top:14px;">

Vrijblijvend · geen kosten · binnen 2 minut=

en ingevuld



=3D"center">


ellspacing=3D"0" border=3D"0">








ans-serif;font-size:14px;line-height:21px;color:#0c3b4a;">

Ontdek in een paar stappen of uw woning geschikt is en we=

lke subsidie mogelijk is.



=3D"center">


ellspacing=3D"0" border=3D"0">




















ans-serif;font-size:12px;line-height:18px;color:#9fc4ce;padding-bottom:12px=

;">

Genoemde bedragen en besparingen zijn indicatief en afhan=

kelijk van uw woning, energieverbruik en persoonlijke situatie. Subsidie (z=

oals ISDE) is mogelijk maar niet gegarandeerd; toekenning en voorwaarden wo=

rden bepaald door de betreffende instantie. Dit is geen aanbod namens de ov=

erheid.

ans-serif;font-size:12px;line-height:18px;color:#9fc4ce;padding-bottom:10px=

;">

U ontvangt deze e-mail omdat u zich heeft aangemeld voor =

informatie over wonen en energie.

ans-serif;font-size:12px;color:#8fd0dc;">


J36RX5JNAPV4X2XB_11#t/u/5bdd2ca95b84be51dc2f" style=3D"color:#8fd0dc;text-d=

ecoration:underline;">Uitschrijven







height=3D"1" alt=3D"">

--000000000000b67c01065d066af6--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 04 Oct 2026 13:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDRR9-00000000Jtt-10Jd

for dave@doctor.nl2k.ab.ca;

Sun, 04 Oct 2026 12:59:51 -0600

Resent-From: The Doctor

Resent-Date: Sun, 4 Oct 2026 12:59:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f200.google.com ([209.85.221.200]:44149)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <3Z37CagoVBsovy3q3suy74rq77q3uCByt748.s42.r7t4s94730.sq@maestro.bounces.google.com>)

id 1xDP5G-00000000Nzw-3loQ

for doctor@nk.ca;

Sun, 04 Oct 2026 10:28:42 -0600

Received: by mail-vk1-f200.google.com with SMTP id 71dfb90a1353d-5e1c96a0d70so222969e0c.0

for ; Sun, 04 Oct 2026 09:27:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=barranewvidros-com-br.20251104.gappssmtp.com; s=20251104; t=1791131239; x=1791736039; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=g3cyEtWnNwYO0KHNvSIuqFHDjckTXmZG0qhd9s6zF6c=;

b=zeOGBijGTd+2tQQmltrwGibv61F2g+VaO8aL34HMjY24dQlkh3e6qfXn8f/3mQgJ9f

EkXMdOLwPQZ+AKPpbJuxody50S2y4b/9d8/gLEn4+3Mj0E0CCvuHLsc8NAl3XkRNhGqJ

EQjdkDzXpkrrQAOKGW26CetnEVW8XfAjidea6ub+m5s/s/ajU6Z7yNMRBvLK+Dkb2YSy

2/o1SJ2MA6VmQpqDzj2Ei+4SiDodjGkFLj3njTMJnqPNJtlSAkuyxTsn9XUKkPdoG3sa

s7XdPwmrvwPuwsJOEeru6EIXoS7nwZTzkEbSXCOw+wQaB1kLq9GlCiL8Ca/YY8/mHCbK

jBAA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791131239; x=1791736039;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=g3cyEtWnNwYO0KHNvSIuqFHDjckTXmZG0qhd9s6zF6c=;

b=q9yc1DJeIYF32RhmWrojE9uvGi1bEMkxfFDJnb3KnWmkPJl2vMFLqTHh2VWl3GmqFp

GwGavCcEw7BjHTq+USWpn0X3Y+1xNM0+vdlYWGTkb5E1NrLb6mNQgh+xCizN6x/eb5UU

OoBCYBrBe5I6NcZnsazwp4y32rAj24j35ET+xGHplv7WsFtfufCUzen0KCmHeSBomTkD

x3/dKBRd5z+uTvq1OfsIwYRY7PmF8R4p0G2YxyFKXiyHOmWpQr+BKNWW0+nn7I7GMk2k

A3TIniV/Ynwky3219GHGC16TMjymQ1LxndKN24gTeOl49Y9cjo8aUMMKlV1SBJVVSf/k

emjw==

X-Gm-Message-State: AFq9FYIKpmTne3xjWIRjcRFByBLuM+5GEB5OLe+hjrDCKx8qTFv1buBc

Bj916FqIsC+do87otH/QblicewZIR8a8sImcLti3qScr0FcUiWyvbmDBLnbGPW2xXusIkpXf/+k

xjWAM3ArQqUd+gn7KvQd1q49Y

MIME-Version: 1.0

X-Received: by 2002:a05:6102:2d04:b0:7c2:8656:8e35 with SMTP id

ada2fe7eead31-7c28656d8aemr903372137.0.1791131239202; Sun, 04 Oct 2026

09:27:19 -0700 (PDT)

Message-ID:

Date: Sun, 04 Oct 2026 16:27:19 +0000

Subject: Bespaar tot 30% op uw energierekening met isolatie

From: Isolatie Expert NL

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000425327065d063d3e"

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: IsolatieExpert Nederland · Energiebesparing Warmer wonen,

lagere rekening Bespaar tot 30% op uw energierekening met goede isolatie



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

[209.85.221.200 listed in dnsbl.ahbl.org]

[209.85.221.200 listed in dnsbl.ahbl.org]

[209.85.221.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: brandarealtor.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: brandarealtor.com]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: klclick.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.200 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_JB BODY: Odd Letter Triples with JB

0.1 TW_JD BODY: Odd Letter Triples with JD

0.1 TW_JK BODY: Odd Letter Triples with JK

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.200 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.221.200 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 IMPRO_URI_2 No description available.

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Bespaar tot 30% op uw energierekening met isolatie

X-Antivirus: AVG (VPS 261004-6, 10/4/2026), Inbound message

X-Antivirus-Status: Clean



--000000000000425327065d063d3e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



SXNvbGF0aWVFeHBlcnQgTmVkZXJsYW5kIMK3IEVuZXJnaWViZXNwYXJpbmcNCg0KDQoNCg0KDQoN

Cg0KV2FybWVyIHdvbmVuLCBsYWdlcmUgcmVrZW5pbmcNCg0KQmVzcGFhciB0b3QgMzAlIG9wIHV3

IGVuZXJnaWVyZWtlbmluZyBtZXQgZ29lZGUgaXNvbGF0aWUNCg0KRWVuIHNsZWNodCBnZcOvc29s

ZWVyZGUgd29uaW5nIGxhYXQga29zdGJhcmUgd2FybXRlIG9udHNuYXBwZW4gdmlhIGhldCBkYWss

ICANCmRlIG11cmVuIGVuIGRlIHZsb2VyLiBNZXQgZGUganVpc3RlIGlzb2xhdGllIGhvdWR0IHUg

ZGUgd2FybXRlIGJpbm5lbiBlbiAgDQpnYWF0IHV3IHN0b29ra29zdGVucmVrZW5pbmcgbWVya2Jh

YXIgb21sYWFnLg0KDQoNCg0KDQoNCuKckyBUb3QgfjMwJSBsYWdlcmUgc3Rvb2trb3N0ZW4g4oCU

IGluZGljYXRpZWYsIGFmaGFua2VsaWprIHZhbiB1dyB3b25pbmcNCg0K4pyTIFN1YnNpZGllIG1v

Z2VsaWprIOKAlCBjaGVjayBvZiB1IGluIGFhbm1lcmtpbmcga29tdCB2b29yIGVlbiBiaWpkcmFn

ZQ0KDQrinJMgTWVlciB3b29uY29tZm9ydCDigJQgZ2VlbiB0b2NodCBlbiBlZW4gYWFuZ2VuYW1l

cmUgdGVtcGVyYXR1dXINCg0KDQoNCg0KDQpPbnR2YW5nIGVlbiBncmF0aXMgdnJpamJsaWp2ZW5k

ZSBjaGVjayB2YW4gdXcgd29uaW5nLiBFZW4gaXNvbGF0aWUtYWR2aXNldXIgIA0Ka2lqa3QgbmFh

ciB1dyBzaXR1YXRpZSBlbiBiZXJla2VudCB3ZWxrZSBiZXNwYXJpbmcgZW4gd2Vsa2Ugc3Vic2lk

aWUgdm9vciB1ICANCmhhYWxiYWFyIHppam4uIFUgeml0IG5lcmdlbnMgYWFuIHZhc3QuDQoNCg0K

DQoNCg0KQmVraWprIG1pam4gbW9nZWxpamtoZWRlbiDihpINCg0KDQoNCg0KDQpHcmF0aXMgJiB2

cmlqYmxpanZlbmQgwrcgT25hZmhhbmtlbGlqayBhZHZpZXMgwrcgR2VlbiB2ZXJwbGljaHRpbmdl

bg0KDQoNCg0KDQoNCkRlIGdlbm9lbWRlIGJlc3BhcmluZ3MtIGVuIHN1YnNpZGllYmVkcmFnZW4g

emlqbiBpbmRpY2F0aWVmIGVuIGFmaGFua2VsaWprICANCnZhbiB1dyB3b25pbmcgZW4gcGVyc29v

bmxpamtlIHNpdHVhdGllOyBlciBrdW5uZW4gZ2VlbiByZWNodGVuIGFhbiB3b3JkZW4gIA0Kb250

bGVlbmQuIEFhbiBlZW4gZ3JhdGlzIGNoZWNrIHppam4gZ2VlbiBrb3N0ZW4gb2YgdmVycGxpY2h0

aW5nZW4gdmVyYm9uZGVuLg0KDQpVIG9udHZhbmd0IGRlemUgZS1tYWlsIG9tZGF0IHUgemljaCBo

ZWVmdCBhYW5nZW1lbGQgdm9vciBhYW5iaWVkaW5nZW4gb3ZlciAgDQp3b25lbiBlbiBlbmVyZ2ll

Lg0KDQpVaXRzY2hyaWp2ZW4NCg0KDQoNCg0K

--000000000000425327065d063d3e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"margin:0;padding:0;background-color:#eceae3;">










ing=3D"0" border=3D"0" style=3D"width:600px;max-width:600px;background-colo=

r:#ffffff;border-radius:10px;overflow:hidden;font-family:Arial,Helvetica,sa=

ns-serif;border:1px solid #dcd9cf;">






















































































ellspacing=3D"0" border=3D"0">










s-serif;font-size:19px;font-weight:bold;color:#ffffff;letter-spacing:0.3px;=

">

IsolatieExpert
ns-serif;font-size:12px;color:#c8d3c4;">

Nederland · Energiebesparing



lor:#8bbf5a;"> 



ellspacing=3D"0" border=3D"0">




















s-serif;font-size:13px;font-weight:bold;color:#5c7a4a;text-transform:upperc=

ase;letter-spacing:1.2px;padding-bottom:10px;">

Warmer wonen, lagere rekening

Roman',serif;font-size:29px;line-height:1.25;color:#2f3a33;font-weight:bold=

;padding-bottom:16px;">

Bespaar tot 30% op uw energierekening met goede isolatie

s-serif;font-size:16px;line-height:1.6;color:#48524a;padding-bottom:8px;">

Een slecht geïsoleerde woning laat kostbare warmte o=

ntsnappen via het dak, de muren en de vloer. Met de juiste isolatie houdt u=

de warmte binnen en gaat uw stookkostenrekening merkbaar omlaag.





ellspacing=3D"0" border=3D"0" style=3D"background-color:#f3f6ee;border-radi=

us:8px;border:1px solid #dfe8d4;">




















sans-serif;font-size:15px;line-height:1.5;color:#2f3a33;border-bottom:1px s=

olid #e2ead8;">

✓ =

Tot ~30% lagere stookkosten — indicatief, afhankelijk van uw w=

oning

sans-serif;font-size:15px;line-height:1.5;color:#2f3a33;border-bottom:1px s=

olid #e2ead8;">

✓ =

Subsidie mogelijk — check of u in aanmerking komt voor een bij=

drage

sans-serif;font-size:15px;line-height:1.5;color:#2f3a33;">

✓ =

Meer wooncomfort — geen tocht en een aangenamere temperatuur





ellspacing=3D"0" border=3D"0">








s-serif;font-size:16px;line-height:1.6;color:#48524a;">

Ontvang een gratis vrijb=

lijvende check van uw woning. Een isolatie-adviseur kijkt naar uw =

situatie en berekent welke besparing en welke subsidie voor u haalbaar zijn=

. U zit nergens aan vast.





" border=3D"0">








dius:6px;">


J36RX5JNAPV4X2XB_11#t/c/e003606983b7bc4a9399" style=3D"display:inline-block=

;padding:16px 38px;font-family:Arial,Helvetica,sans-serif;font-size:17px;fo=

nt-weight:bold;color:#ffffff;text-decoration:none;border-radius:6px;backgro=

und-color:#5c7a4a;">Bekijk mijn mogelijkheden →





ellspacing=3D"0" border=3D"0" style=3D"border-top:1px solid #e6e3da;">








Arial,Helvetica,sans-serif;font-size:13px;line-height:1.5;color:#7a8378;">

Gratis & vrijblijvend · Onafhankelijk advies &=

middot; Geen verplichtingen





ellspacing=3D"0" border=3D"0">








s-serif;font-size:11px;line-height:1.6;color:#a9b3a4;">

De genoemde besparings- en subsidiebedragen zijn indicati=

ef en afhankelijk van uw woning en persoonlijke situatie; er kunnen geen re=

chten aan worden ontleend. Aan een gratis check zijn geen kosten of verplic=

htingen verbonden.





U ontvangt deze e-mail omdat u zich heeft aangemeld voor =

aanbiedingen over wonen en energie.






J36RX5JNAPV4X2XB_11#t/u/e003606983b7bc4a9399" style=3D"color:#c8d3c4;text-d=

ecoration:underline;">Uitschrijven







height=3D"1" alt=3D"">

--000000000000425327065d063d3e--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 04 Oct 2026 13:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDRR3-00000000JtJ-3akL

for dave@doctor.nl2k.ab.ca;

Sun, 04 Oct 2026 12:59:45 -0600

Resent-From: The Doctor

Resent-Date: Sun, 4 Oct 2026 12:59:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f198.google.com ([209.85.128.198]:42280)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDOpV-00000000MC6-0qM5

for doctor@nk.ca;

Sun, 04 Oct 2026 10:12:25 -0600

Received: by mail-yw1-f198.google.com with SMTP id 00721157ae682-8461ade272bso9925107b3.1

for ; Sun, 04 Oct 2026 09:10:48 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sbac.ac.th; s=google; t=1791130242; x=1791735042; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=kFD4kTWZOPJEDZKIb4xvO16Uli1IQGKnW44MFJy4wr0=;

b=kb9k3dcRF3HZuhALhtlfFhAA5b0bIGP8/aswUqiI51tqUZ5HMBwUVRQ4WeCnxs3OyP

5uOw17VX3EsJMwLsu6aQwJWLDKq6C8RmRxkA8NpYcCXC/IPMOlvr/J3HPz4BumGunIYS

4DTar9jX+2yih/NgrSGGNm+qMo2VwhW5ppxPrUroj9EYhlfCS9RwXaCGth/7XjqU0oRk

ZIaBtOadbwltHm/0BOQR4V+3fsIh+gBPiyHmIpiNRJVAF0WrXLHr3fzEOdatwzQo8y1/

5a0DhB3OW42wTVDNv3LXXeauBjcqxBCQC7xXD+jGEFfhwsGbpGUHhec4a8I9GRQ7kZVK

gZHA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791130242; x=1791735042;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=kFD4kTWZOPJEDZKIb4xvO16Uli1IQGKnW44MFJy4wr0=;

b=GKj9ogqMq8IrB06AbTJDmZVVqU2Yb3jC3gWbeT3IUaap6zs4IdJdDJjtDxnHFds331

QxGVicnMgd3XvTOPQcjmgUKH5GaynsEe0aK4CshirOfyDc05Mkqv64w6BK437R2tWAzW

mnLX8QuCeBDMs5J85DRlQIFi71SeIwvOnaoxi2tTFLjYnKllWWk2+0h78CZefGEUn4Ly

RieZpxpCFDVTPFJoXMBNXitMLKXHXgH4QbjwDTORLRMOybFD/b634wXKIb29znWvm19v

UAZp30nJbqm78yGBCiXfwxcfV9POLLK3fIREfJNv93VYmfoFeD8AdMyFD9gIuX+gVq6J

UiwA==

X-Gm-Message-State: AFq9FYIo33kEycfiudk998h3+OaxivBU8LnJLUTkZhc7yZSJkWQosqZN

yEuZyf8DMLnHdjBFYNZ/VkqO3xK2wRnaIV3egNgy+8mLclOfBCRqdt6JlnJH1GX48ma3kUORGFR

BTnHflcA7OoiCAkZdTcA1nfIS

MIME-Version: 1.0

X-Received: by 2002:a05:690c:660b:b0:8a6:e07e:8e73 with SMTP id

00721157ae682-8ae39bba7b4mr30422027b3.5.1791130242254; Sun, 04 Oct 2026

09:10:42 -0700 (PDT)

Message-ID:

Date: Sun, 04 Oct 2026 16:10:42 +0000

Subject: Claim je gratis Auto Noodpakket - Doe mee met onze enquete!

From: De Wegenwacht

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000d61e7a065d060100"

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Deze week gereserveerd: een gratis ANWB Auto Noodpakket. Vul

de enquête van 1 minuut in en claim het. ANWB Noodpakket Actie Speciaal

gereserveerd voor [email]



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: cedarstonevale.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: klclick.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: cedarstonevale.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.198 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.198 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.198 listed in list.dnswl.org]

Subject: {SPAM?} Claim je gratis Auto Noodpakket - Doe mee met onze enquete!

X-Antivirus: AVG (VPS 261004-6, 10/4/2026), Inbound message

X-Antivirus-Status: Clean



--000000000000d61e7a065d060100

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



RGV6ZSB3ZWVrIGdlcmVzZXJ2ZWVyZDogZWVuIGdyYXRpcyBBTldCIEF1dG8gTm9vZHBha2tldC4g

VnVsIGRlIGVucXXDqnRlIHZhbiAgDQoxIG1pbnV1dCBpbiBlbiBjbGFpbSBoZXQuDQoNCg0KDQpB

TldCIE5vb2RwYWtrZXQgQWN0aWUNCg0KU3BlY2lhYWwgZ2VyZXNlcnZlZXJkIHZvb3IgW2VtYWls

XQ0KDQoNCldhdCBIZWIgSmlqIE51IEVjaHQgSW4gRGUgS29mZmVyYmFrIExpZ2dlbj8NCg0KRWVy

bGlqayBnZXplZ2Qg4oCUIGFscyBqZSBhdXRvIGVyIG51IG1lZSBvcGhvdWR0LCBtaWRkZW4gb3Ag

ZWVuIGxlZ2Ugd2VnLCAgDQpnZWVuIGJlcmVpaywgem91IGplIGRhbiBlY2h0IGhlYmJlbiB3YXQg

amUgbm9kaWcgaGVidD8NCg0KRGUgbWVlc3RlIGF1dG9tb2JpbGlzdGVuIG5pZXQuIERhYXJvbSBo

ZWVmdCBBTldCIGRlemUgd2VlayBlZW4gYmVwZXJrdCAgDQphYW50YWwgZ3JhdGlzIEF1dG8gTm9v

ZHBha2tldHRlbiBnZXJlc2VydmVlcmQsIGVuIGpvdXcgYWRyZXMgeml0IGluIGRpZSAgDQpzZWxl

Y3RpZS4NCg0KVnVsIG9uemUgZW5xdcOqdGUgdmFuIDEgbWludXV0IGluIGVuIHdpaiBzdHVyZW4g

am91IGhldCBwYWtrZXQgdG9lIOKAlCAgDQpzdGFydGthYmVscywgemFrbGFtcCwgRUhCTy1iYXNp

cywgZ2V2YXJlbmRyaWVob2VrLg0KDQpQcmVjaWVzIHdhdCBqZSBub2RpZyBoZWJ0LCBvcCBoZXQg

bW9tZW50IGRhdCBqZSBoZXQgbmlldCB2ZXJ3YWNodC4NCg0KDQoNCg0KVnJhYWcgTWlqbiBBTldC

IE5vb2RwYWtrZXQgQWFuIOKGkg0KDQoNCg0KR2VlbiBhYW5rb29wIHZlcmVpc3QuIEFjdGllIHN0

b3B0IHpvZHJhIGRlIHZvb3JyYWFkIHZhbiBkZXplIHdlZWsgb3AgaXMuDQoNClZlcnpvbmRlbiBu

YWFyIFtlbWFpbF0gYWxzIG9uZGVyZGVlbCB2YW4gZGUgQU5XQiAgDQpwZWNoaHVscC12b29ybGlj

aHRpbmdzYWN0aWUuIEFmbWVsZGVuIMK3IEhpZXIgYWZtZWxkZW4gb3AgZWxrIG1vbWVudC4NCg0K

DQoNClVuc3Vic2NyaWJlDQoNCg0KDQo=

--000000000000d61e7a065d060100

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






schemas-microsoft-com:office:office">






1">






ail=3Dno,date=3Dno,url=3Dno">

ANWB Noodpakket Actie







Deze week gereserveerd: een gratis ANWB Auto No=

odpakket. Vul de enqu=C3=AAte van 1 minuut in en claim het.




=3D"0" border=3D"0" style=3D"background:#d7d7d7;">












padding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"width:460px; max-widt=

h:460px; background:#ffffff;">




























































10px; font-family:Arial,sans-serif; font-size:20px; font-weight:800; letter=

-spacing:0.5px; color:#ffffff;">

ANWB Noodpakket=

Actie

0px; font-family:Arial,sans-serif; font-size:12px; font-weight:700; letter-=

spacing:0.3px; color:#191919; text-transform:uppercase;">

Speciaal gereserveerd voor [email]



font-size:24px; font-weight:700; line-height:30px; color:#191919; text-ali=

gn:center;">

Wat Heb Jij Nu Echt In De Kofferbak Liggen?




:16px; font-weight:400; line-height:24px; color:#444444;">

Eerlijk gezegd — als je auto er nu mee ophoudt, midde=

n op een lege weg, geen bereik, zou je dan echt hebben wat je nodig hebt?




font-size:16px; font-weight:400; line-height:24px; color:#444444;">

De meeste automobilisten niet. Daarom heeft ANWB deze week =

een beperkt aantal gratis Auto Noodpakketten gereserveerd, en jouw adres zi=

t in die selectie.




font-size:16px; font-weight:700; line-height:24px; color:#191919;">

Vul onze enquête van 1 minuut in en wij sturen jou he=

t pakket toe — startkabels, zaklamp, EHBO-basis, gevarendriehoek.




font-size:16px; font-weight:400; line-height:24px; color:#444444;">

Precies wat je nodig hebt, op het moment dat je het niet ve=

rwacht.



cellspacing=3D"0" border=3D"0" class=3D"cta">








und:#003A63; border-radius:8px;">


Y4J36RX5JNAPV4X2XB_11#t/c/06d9a25928f19110c628" target=3D"_blank" style=3D"=

display:block; padding:16px 10px; color:#ffffff; font-family:Helvetica,Aria=

l,sans-serif; font-size:20px; font-weight:700; text-align:center;">

Vraag Mijn ANWB Noodpakket Aan →



gn:center; font-family:Helvetica,Arial,sans-serif; font-size:13px; font-wei=

ght:400; line-height:18px; color:#777777;">

Geen aankoop vereist. Actie stopt zodra de voorraad van deze =

week op is.

14px; font-family:Arial,sans-serif; font-size:12px; font-weight:400; line-h=

eight:16px; color:#ffffff;">

Verzonden naar [email] als onderdeel van de ANWB pechhulp-voo=

rlichtingsactie.


X5JNAPV4X2XB_11#t/u/06d9a25928f19110c628">Afmelden ·
https://gougxwig@ctrk.klclick.com/l/01KCGS3SY4J36RX5JNAPV4X2XB_11#t/p/06d9a=

25928f19110c628" target=3D"_blank" style=3D"color:#ffffff; text-decoration:=

underline;">Hier afmelden

op elk moment.







acing=3D"0" border=3D"0" style=3D"width:460px; max-width:460px;">








ial,sans-serif; font-size:11px; color:#888888;">


X5JNAPV4X2XB_11#t/u/06d9a25928f19110c628" target=3D"_blank" style=3D"color:=

#888888; text-decoration:underline;">Unsubscribe








=20








" height=3D"1" alt=3D"">

--000000000000d61e7a065d060100--

NIgerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 04 Oct 2026 05:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDKWW-000000007SE-2NKS

for dave@doctor.nl2k.ab.ca;

Sun, 04 Oct 2026 05:36:56 -0600

Resent-From: The Doctor

Resent-Date: Sun, 4 Oct 2026 05:36:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo2-f39.google.com ([74.125.231.167]:46672)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDEDP-00000000GqD-3wv4

for root@nk.ca;

Sat, 03 Oct 2026 22:52:25 -0600

Received: by mail-oo2-f39.google.com with SMTP id 46e09a7af769-82401febe1bso645530a34.2

for ; Sat, 03 Oct 2026 21:50:34 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1791089428; cv=none;

d=google.com; s=arc-20260327;

b=d9LwIlpPhN0nX9CwyePTVPfJISAqyJ7A8X1c89sSIhmBkzMcIk0PW+Zio8bXt/rQ5v

IyxZfqt6uZbk1TMb9arvxNpxtf6cwgovDSDeEqIwLAaIiRSYqRlPaJKmjRc8Fx9SCw69

zwA/4scTnXxdsasaP8DJGXnZg0thu2OJcOEJqW4vFEFambWHBGroYwv8i/SO4WLc2x2M

SjBKedDCsHLIh2W1nRM+QGHiB/2sOV0dzHMGNBzsDew4zOILlbUDGsIrTYs/B9ThgXAk

cWaiMJBslFp6MSPk0FkiDUylLT6Ng9fBZVr71dvPJWWYq5hPysFTI/AafrIwMvz1Y73E

8EsQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=Isrh9LOn+wZYcmvn2454ANgu7WPGZ4eyU1I6ds2cip8=;

fh=cQ02FObZ4wNRnMwP/ZDBmeq6fFK7PCs+LQJXQhDpFiw=;

b=UYSojGdUgwL9YngbB9q9ddw9HobzbvZCAgvhnA4pPy9CyZF0xDJwsznN++6RMl4hNN

DKO/nG+uiUTog91pE3bcQYXxqsn+KlTQxxkYREFRDjKBHv8SfkCgyc3vKl7bpkQm+4uC

dl77LzTDCrN9KtVwlV2msgCxejGzYKXI0Lf9gIN1dtsBTTTlRhuMpe6enwpUxZ8pRuqQ

fhBM5FMf5+78yOZo11FFa/2qEs/sv8LPk3KsFQtXmfRlbj7OC4v/E8MBhSzE884Lz2V2

i7uSLOwYahdt5kypbJqFDhk2Zuh3BmFkiQwa7Eql5ItuHPx3CM5DyzxYzUF0Rd/TiQM6

6GtA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791089428; x=1791694228; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Isrh9LOn+wZYcmvn2454ANgu7WPGZ4eyU1I6ds2cip8=;

b=knRdtfb0tZlvMdE6VZcjGpIkWR0cxFX1DCts20qLJOvrEC0vVJJBICsP1+7zCd2OQX

4N536bZ7pe1NGt72hJclAtZbmWRHyX6Nkr88OrEKsAC0cYARae+xTSTdoGNrJ6XOzpK+

f4CibFQ4qOQV6uF20nCEM0BADZ2CdQILmCnFTIcjRvM1D4i5ZDisM7bHlRuiR6Y9P77y

DYdPx7iVtTf/tlN815HjTKRAPcyambheZQoxCFDAatBl++gp57WAMAJRy6i8yGZiTeW/

5784k8F39Kj8JYaj3F8GcoiSEym/4f1XsMynQ10UIwNDfca96FPGqWelxp6YT/78aYS9

7uBg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791089428; x=1791694228;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Isrh9LOn+wZYcmvn2454ANgu7WPGZ4eyU1I6ds2cip8=;

b=rEjNaLf/bwUEyq8melYB5RK/2374WGuntejPPfpsSNfoWglpGNTEYUE7imf8EJ9y93

DUz8khyeMWGROGwLCt4u3bfC98GvtHRWe/RW36W+jlkdiuUe4q78a092jdq83h/nu0XT

EW/mmMIr0sa+BQ0XNzqrwTufsNpdYKnSPRtK8olPB9kZ0Ynqj72OHHAY4HTTLdmDay9V

LrktUhmBU1ZtusqCZH0UCOxyeiud0aaQhzhrzYeKIW3FBywKA0WjDHW4gDV4FlDiXfwK

nVCPS18yQ1J4GXPHZfiSnVwnSt6dYFfF+YMIeiSxEbp/PSOvD63t4hDMErk8oL0+Az8P

YMmQ==

X-Forwarded-Encrypted: i=1; AKwUvByslq6NWBdqKxNu4urpeGHPJ7K466cecFCk3ti8hL4chs9qLWQ2cc6L2XZXhMXMZvecA2DH@nk.ca

X-Gm-Message-State: AFuF++nbupipvQJ0meLENvpN6CczLnth8Ox5fw/u9gcqn3ETCh7mp8+2

/IVzs4osHMZ35qxoF5uZTwwyXfl6104oimdntJ/djPupz34zdCrws+KLx4J56HkPbNbptjskys5

LFFVxxe2pCYV/BGFOjznwBHqJBGTtEPQ=

X-Gm-Gg: AYBFou3rqN1+hpp/u1MiVt3kBt1p8Ac+E0KDhQDGE88o0zaqNERY/vcFqYZq4i17v2N

b1UeOGCmAnNb5MafRLTiQPxQkY8erMFZi7oNTgzPwDZCxJGBgUqqvF7rn5wgn0F48x92jRdm0IO

mxnMCGitltosXbmxKezTrTAkM4cbAjAbLmSQA+S9jz7P7sYrdkMlOcKvRIy2clAsCnXipol6ErJ

/9jLpuq/J+7AGaHNhQF5ty6I5Ywf595sSSIhlJrYiEdJDR10upUEcwU0bIUkuWcEzLLjyy3Avva

ezan182dwOe1ur+ZZA8Z53ayGpeM7rKfek4YUK1I3p7GECcpw6H4hM+KXHR6w0h3HjFmqinBKWt

eQ+xC2ljz/MJOSbz6R5FW9UHxFVYwC8yFvMl9

X-Received: by 2002:a05:6830:926:b0:81e:c734:6980 with SMTP id

46e09a7af769-8228218380fmr7288347a34.11.1791089427739; Sat, 03 Oct 2026

21:50:27 -0700 (PDT)

MIME-Version: 1.0

From: Leo Zulu

Date: Sun, 4 Oct 2026 06:50:14 +0200

X-Gm-Features: AclHuK90QwcE16U84WQ4VydiBiOKkaO9bswiQsTQMyDWifzTYOwPp8oa5OMveaw

Message-ID:

Subject: Dear Friend:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000019f988065cfc8102"

Bcc: root@nk.ca

X-Spam_score: 16.1

X-Spam_score_int: 161

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend: I am Mr. Robert Setshedi a Financial Consultant

from South Africa. I want to partner with you on a transaction worth $100M

USD. I had a client who unfortunately died of COVID-19 complications from

202 [...]



Content analysis details: (16.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.231.167 listed in dnsbl.ahbl.org]

[74.125.231.167 listed in dnsbl.ahbl.org]

[74.125.231.167 listed in dnsbl.ahbl.org]

[74.125.231.167 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.231.167 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.231.167 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.231.167 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.231.167 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[zululeo354(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[zululeo354(at)gmail.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.231.167 listed in wl.mailspike.net]

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

2.5 HK_SCAM_N2 BODY: No description available.

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.231.167 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.231.167 listed in will-spam-for-food.eu.org]

[74.125.231.167 listed in will-spam-for-food.eu.org]

[74.125.231.167 listed in will-spam-for-food.eu.org]

[74.125.231.167 listed in will-spam-for-food.eu.org]

[74.125.231.167 listed in will-spam-for-food.eu.org]

[74.125.231.167 listed in will-spam-for-food.eu.org]

[74.125.231.167 listed in will-spam-for-food.eu.org]

[74.125.231.167 listed in will-spam-for-food.eu.org]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 HK_SCAM No description available.

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Dear Friend:

X-Antivirus: AVG (VPS 261003-4, 10/3/2026), Inbound message

X-Antivirus-Status: Clean



--00000000000019f988065cfc8102

Content-Type: text/plain; charset="UTF-8"



Dear Friend:



I am Mr. Robert Setshedi a Financial Consultant from South Africa. I want

to partner with you on a transaction worth $100M USD. I had a client who

unfortunately died of COVID-19 complications from 2020. I want you to

receive this money as a representative for my late client. He died

intestate together with his nominated next of kin unfortunately. I shall

provide to you all appropriate legal documents that will present you as a

legal representative and entitlement to this assets/estate. Part of this

estate is in AU METAL (100kg).



When you reply through my Email: setshedirobert0@gmail.com. we shall

discuss a whole lot of issues including disbursement modalities and of

course any questions you will have regarding the process of this

transaction.



Best Regards

Mr. Robert Setshedi.



--00000000000019f988065cfc8102

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Friend:

I am Mr. Robert Setshedi a Financial C=

onsultant from South Africa. I want to partner with you on a transaction wo=

rth $100M USD. I had a client who unfortunately died of COVID-19 complicati=

ons from 2020. I want you to receive this money as a representative for my =

late client. He died intestate together with his nominated next of kin unfo=

rtunately. I shall provide to you all appropriate legal documents that will=

present you as a legal representative and entitlement to this assets/estat=

e. Part of this estate is in AU METAL (100kg).

When you reply throug=

h my Email: setshedirobert0@gm=

ail.com. we shall discuss a whole lot of issues including disbursement =

modalities and of course any questions you will have regarding the process =

of this transaction.

Best Regards
Mr. Robert Setshedi.




--00000000000019f988065cfc8102--

iCloud Storage phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 21:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDCms-000000007Rd-0ubv

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 21:21:18 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 21:21:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [210.79.190.171] (port=56471 helo=daum.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

id 1xDCG0-0000000031y-3rel

for doctor@nl2k.ca;

Sat, 03 Oct 2026 20:46:56 -0600

Date: Sat, 03 Oct 2026 22:44:30 -0400

From: =?UTF-8?B?U3RvcmFnZSBBbGVydCBUZWFt?=

Reply-To: =?UTF-8?B?VXctY2xvdWRhY2NvdW50?=

To: doctor@nl2k.ca

Message-ID:

Subject: =?UTF-8?B?U3RvcmFnZSB3YXJuaW5nOiBZb3VyIGlDbG91ZCBzdG9yYWdlIGlzIGFsbW9zdCBmdWxs?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.w0myGv0UgnVV5t8FgeZRnU41qXGvGcLQ.localhost.doctor>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@Swee.fr

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 27.2

X-Spam_score_int: 272

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Storage Warning iCloud Storage



Content analysis details: (27.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[210.79.190.171 listed in dnsbl.ahbl.org]

[210.79.190.171 listed in dnsbl.ahbl.org]

[210.79.190.171 listed in dnsbl.ahbl.org]

[210.79.190.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[210.79.190.171 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[210.79.190.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[210.79.190.171 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[210.79.190.171 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[210.79.190.171 listed in bl.score.senderscore.com]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.0 HK_RANDOM_FROM From username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible

phishing

2.5 WIKI_IMG Image from wikipedia

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?UTF-8?B?U3RvcmFnZSB3YXJuaW5nOiBZb3VyIGlDbG91ZCBzdG9yYWdlIGlzIGFsbW9zdCBmdWxs?=

X-Antivirus: AVG (VPS 261003-4, 10/3/2026), Inbound message

X-Antivirus-Status: Clean
















PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">











Storage Warning

































Cloud

iCloud Storage

Alert








Warning! Your iCloud Storage Is Full.




Because you've exceeded your storage plan, your documents, contacts, and device data are no longer

backing up to iCloud and your photos and videos are not uploading to iCloud Photos. iCloud Drive and

iCloud-enabled apps are not updating across your devices.





Your data will be lost without security protection if no urgent action is taken.













Recommendation


250 GB


Unlock space for 10,000+ Photos












Feature

Current

New





Total Space


5 GB


250 GB






Photo Sync


Paused


Active






Protection


Standard


Pro










Activate Upgrade





Unsubscribe





















Nigerian spam from Yahoo! mail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 21:21:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDCmj-000000007QT-2mt9

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 21:21:09 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 21:21:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sonic317-27.consmr.mail.bf2.yahoo.com ([74.6.129.82]:41415)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDC61-000000000E3-2yzM

for doctor@nl2k.ab.ca;

Sat, 03 Oct 2026 20:36:38 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791081335; bh=ZRUkw4dMJoJzD58h52kZE+tr1KEVgmwMHk4sOxkX6ds=; h=Date:From:Reply-To:References:Subject:From:Subject:Reply-To; b=LkP0TGW+uKrLAnPU90eePWgziKcCOMBqhq2zw9DR4tCtBCdVRCckgKDLFrhqZBQgahnga/I2uupDWbgLSPv/xH5zBLmucQTtBCeHOxVujrq9NXbp9d16W0iUc5t0yAfl42vp40n+23VQPJMc8HHNI+TaZT/5Nuk+iz505V6EYe5/CFvGNB01kxHXuR9L5+T8yOU589pRLfa/xIrdgkKBSQsYbANWZjPhoEYLLBp0hvOKWSJpeyXyCRtecOEbRVNofrRhrAygvi92lmBOTDHuK30frvdAIwcVWCQ1wF+F1Ty6zN4Tp5CaCzE/rDnU4hOKzNFCUaCT/mcgVJUyjue6BA==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791081335; bh=9to6T2scqipTi9QMRYW2IYyI8VHx2q1T5UYuXjL+pKZ=; h=X-Sonic-MF:Date:From:Subject:From:Subject; b=O4Je/V6OPYGZd9PfcICcGe4e1l+2kuKQCo6ebzBpkSaO5Jtx1pFmzYfhUk4ZKdVlFsFTKqLCOYuhffKIKKmDUEypk1ORI/Zc0IBHiPUl3p4NV39m7eO/GMh4ZaVkcIp2qDzIOtUYgjWpKZ69eY7qjfq++UmBHLoPgUb/aqGAXOvipamltbGVIUeWFDhX2+f1QGyURiUQLJZunezpWGoKj7RJ1mjslNt2gKDKKGM/Knd5NzLqD1yrr4GKwhphf7nfgLJJIOvYW3cXdqmY/G9Un7eOrQtOCkYxfFFMVw5agGYiL6rUjm3pgM0ja70z/BYZmUtIK38VdQK3LzMPCp+yzg==

X-YMail-OSG: 3WDoHtIVM1lxzvOYIBJxTkaDuGPqNfL5h.KRrSH2yilrAXUx2FO078yg1ftukFm

XBcEV255QVKGVCbI397FATHCQKq2iF_kRlbJ15Sva0vQ2QKqLU9Sj1ZV86bcv8cufkfTDUciImAR

1c1cD.uyxdyNnsom3d7anSDyHJ3Q1kDw0mYrW5zdCgUYwQQ7znvpIwZeGcoT4Z2b1jL2ZCB7ei2j

yaJ9v.3uE8Pzl3W.CYm4cRElq0qQirrT8VFmsxj5qi39vLi_XRkg3YHL_LwKy79ghW85V030f83m

SeKWlQjcj6fxUYNIdZenrpVxgIuIxZh2HgXrL0f7sdOmu2SccGghAw2n2CghbdxQIjuQRIV7zxQV

AFNuZ9idOt2Xx8zgrvLeJdCfy67mYMylpgp6cM7vb4dvA7iR0VTC40MJT7oF3Fb4DF71uzH6W8yk

rm4WFZ79CEcI1nN.rnDtswDvZu.aFSqedXUFNC9eQPAjO98YjsdY6j7x11rGaBOhGbEtWndV3AI6

JpsWo227e6JXMVGN0RzPW_._otgbOpLHUEZ5_P1xoFF6P4biZkXhPeYfAlXeeyubz10Ub1muSdQX

zUXx6mpfa1yGT7OgQ2m5wLxUXLVcNtH.CaNLfgZM_HcF5aI9_gb5EfA7E0vWlHiLE1CYzONYzRnV

_gLHlpsnQkp79mAiU0DGoSuNjIgABwxW480nN6qNskPxXTWM4CoCVS_jDZA9RQ.XQZmM0C_Eo93f

jc.TJmoIQuXibz9MJW4GlTlUkT_PCdgO5NljjPqnQuxtDSMecoZBACVMXu5YKVLsGAVzpYER2Z2T

_oSTR4kN_rxkxH0iFT2HiAcW3DY_j0KzOavri3tMYwaYgbW3NJ.aRvnLzwianRJeN7EQOHeNuitr

mY9bu_D_S.1lHMCqCnbIbk31PQQy0HyxL6ePC2CFNt4.I9iZLSTEjuvlfp8IY2HJA19rq3wjrMxV

bE3u9_QIJvmVNZRsFLQriilesld59dj.E7g8KIywP0HyS__SgyRgLwEIyBto3EHe5xJDcgdBY.pl

hHV4DD0oBTEvkCUkbYlZDj5PwSIyqtqLhFoqlt_3SOFjeYPi45yarJR2zKn8Q8tYpHiTxEuXAYLp

THn2akwW6DZi.VQ1Lppsgk63RQEPGVj.LCxT4UtNHU1EK97UpWxSYETOg0X6k_1.Ego__Shqw3JV

TW.NeFQG7LGPcwW.JSzM3i1eVWni4lIR.SbjMAZx1cqyi8x0.kN9ZRFU4H5HiFr8y4JNULXo8cD7

AiOAiHsMkDmrOb4pH0t6Nhlx6OREAiU3fQfzfSYNgf3zZSFaA4DAX8MImHZkpIAUq9s28dmJNsns

WLDBqnHFeYFeoZGyMoNqU9Or1vJYxkYRE73j.eBZJ7SrPHZd8_guh9DQC4iidxV84sr6sVMlXszS

ejiEQGveIMXBgkS5J4OxZqjUFVk7vMujAnXIyT8BT_XRtY9f7azX7GvFA6ARdKT0t1aNbgfR1BsO

4BmhDoX301lvSN5iZiy0BT0Z4SfQqCm6XrKDqRtmddBVo8c_ZUBC3HJBIFMTvzBXUPYJN6ObxA.q

FLxk68fEVGhM4LWjcVz4IVTGPMt6rl7RIIC24QWVc0LpUrkm.gkQNC00PfR_QU_u319zIFSH.CQT

dq16RBQyhVYgGzvpXyYgK2H8jIMwVfepLdj5ir1IEX70.DQ2WL2hSxCO_UJAjMPtXVoJn2LYHzNc

pa.CbEVms6a9yiX6a_aWhIHX5fRHjC2OD2rg13yjhV76kVqew42JP5unlH2rj0mtMwEEm_73e_VV

GUObk2.1di8RkHOu5R.kZiu7.Ag8.qIW8fDgqoHUM0Ab12kOIeJGWxWO4cpUx86w9cnvBq.g8fzu

gtegg0a5YxxPAdWdaCBQXHPPLBX.SMTdf9Ww7YdHIdC21PMO3RmTqz21qvvj8TMSs5qgDTyKNPN7

KhGJ7xKivzHSjI_LozBQlGTfPFmEHgrYDv3scCyz64dXFEt7DyvW3NpZGYGXmY5Yc7RVW21AP8xW

6crKSKH2A4.oaycvx0aXTPXM062t42CDUUodiqQm4ZKa1sShc6unWMmMBW8j_pdi5jf3Gw6pPIv9

b8WHKesioPAGjbMPfr4u3m8IB.cIyMYDw24E2nxgZ9opMXEk1zxy2vr_zzWhh72lx_PW3KXs7gmT

.oxna0z_9tsbIkosAyPZDHY.HUcLgkoZ6fKI1qsUZxfTSM8PmJ1PSVFvZGHdwn2N5K2rH1o9CO0e

XYV7UtV7Dg9L2EidcfS6xHyL6eAW8WUmxNN6jsCRLvoxSN.G0.yix7Ccd3tJFyEti

X-Sonic-MF:

X-Sonic-ID: dc6b5684-213b-4405-a75c-246444b1a9e9

Received: from sonic.gate.mail.ne1.yahoo.com by sonic317.consmr.mail.bf2.yahoo.com with HTTP; Sun, 4 Oct 2026 02:35:35 +0000

Date: Sun, 4 Oct 2026 02:35:31 +0000 (UTC)

From: myriam.lee002@yahoo.com

Reply-To: myriam.lee002@yahoo.com

Message-ID: <1455376361.198396.1791081331348@mail.yahoo.com>

References: <1455376361.198396.1791081331348.ref@mail.yahoo.com>

Subject: Dear Beloved One,

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Mailer: WebService/1.1.26668 YMailMini

X-Spam_score: 13.1

X-Spam_score_int: 131

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beloved One, Greetings in the name of our lord Jesus

Christ and my name is Mrs. Myriam Lee, an aging widow of (69 years old) and

I am from Ukraine, and I am suffering from the serious Bullet wound I sustained

duri [...]



Content analysis details: (13.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

[74.6.129.82 listed in dnsbl.ahbl.org]

[74.6.129.82 listed in dnsbl.ahbl.org]

[74.6.129.82 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.6.129.82 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[myriam.lee002(at)yahoo.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[myriam.lee002(at)yahoo.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[myriam.lee002(at)yahoo.com]

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.6.129.82 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.6.129.82 listed in bl.score.senderscore.com]

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.1 HK_SCAM No description available.

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dear Beloved One,

X-Antivirus: AVG (VPS 261003-4, 10/3/2026), Inbound message

X-Antivirus-Status: Clean



Dear=C2=A0Beloved=C2=A0One,



Greetings=C2=A0in=C2=A0the=C2=A0name=C2=A0of=C2=A0our=C2=A0lord=C2=A0Jesus=

=C2=A0Christ=C2=A0and=C2=A0my=C2=A0name=C2=A0is=C2=A0Mrs.=C2=A0Myriam=C2=A0=

Lee,=C2=A0an=C2=A0aging=C2=A0widow=C2=A0of=C2=A0(69=C2=A0years=C2=A0old)=C2=

=A0and=C2=A0I=C2=A0am=C2=A0from=C2=A0Ukraine,=C2=A0and=C2=A0I=C2=A0am=C2=A0=

suffering=C2=A0from=C2=A0the=C2=A0serious=C2=A0Bullet=C2=A0wound=C2=A0I=C2=

=A0sustained=C2=A0during=C2=A0the=C2=A0ongoing=C2=A0Ukraine=C2=A0and=C2=A0R=

ussia=C2=A0war,=C2=A0and=C2=A0I=C2=A0am=C2=A0currently=C2=A0admitted=C2=A0i=

n=C2=A0a=C2=A0private=C2=A0hospital=C2=A0here=C2=A0in=C2=A0Ukraine.



I=C2=A0have=C2=A0some=C2=A0funds=C2=A0I=C2=A0inherited=C2=A0from=C2=A0my=C2=

=A0late=C2=A0loving=C2=A0husband=C2=A0who=C2=A0also=C2=A0died=C2=A0of=C2=A0=

the=C2=A0war=C2=A0a=C2=A0few=C2=A0months=C2=A0ago=C2=A0and=C2=A0the=C2=A0su=

m=C2=A0of=C2=A0US$=C2=A04.700.000=C2=A0which=C2=A0he=C2=A0deposited=C2=A0wi=

th=C2=A0a=C2=A0Bank=C2=A0in=C2=A0Panama.



I=C2=A0am=C2=A0looking=C2=A0for=C2=A0an=C2=A0honest=C2=A0and=C2=A0God-feari=

ng=C2=A0person=C2=A0that=C2=A0can=C2=A0use=C2=A0these=C2=A0funds=C2=A0for=

=C2=A0God's=C2=A0work,=C2=A0also=C2=A0creating=C2=A0a=C2=A0charitable=C2=A0=

organization=C2=A0for=C2=A0the=C2=A0less=C2=A0privileged,=C2=A0helping=C2=

=A0the=C2=A0elderly,=C2=A0the=C2=A0poor,=C2=A0and=C2=A0also=C2=A0the=C2=A0w=

ar=C2=A0victims=C2=A0and=C2=A015%=C2=A0out=C2=A0of=C2=A0the=C2=A0total=C2=

=A0funds=C2=A0will=C2=A0be=C2=A0for=C2=A0your=C2=A0compensation=C2=A0for=C2=

=A0doing=C2=A0this=C2=A0work.



I=C2=A0found=C2=A0your=C2=A0email=C2=A0address=C2=A0from=C2=A0the=C2=A0inte=

rnet,=C2=A0and=C2=A0I=C2=A0decided=C2=A0to=C2=A0contact=C2=A0you=C2=A0after=

=C2=A0my=C2=A0prayers=C2=A0hoping=C2=A0that=C2=A0you=C2=A0will=C2=A0not=C2=

=A0betray=C2=A0the=C2=A0trust.



If=C2=A0you=C2=A0could=C2=A0be=C2=A0able=C2=A0to=C2=A0do=C2=A0this=C2=A0wor=

k,=C2=A0please=C2=A0email=C2=A0me=C2=A0back=C2=A0for=C2=A0more=C2=A0detail=

=C2=A0on=C2=A0how=C2=A0it=C2=A0could=C2=A0be=C2=A0done.



My=C2=A0warmest=C2=A0regards=C2=A0to=C2=A0you=C2=A0and=C2=A0your=C2=A0famil=

y=C2=A0and=C2=A0I=C2=A0wait=C2=A0for=C2=A0your=C2=A0positive=C2=A0reply.



Your=C2=A0Sister=C2=A0in=C2=A0Christ,



Mrs.=C2=A0Myriam=C2=A0Lee.

Nigerian spam from Yahoo! mail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 21:21:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDCmg-000000007Q9-185l

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 21:21:06 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 21:21:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sonic317-27.consmr.mail.bf2.yahoo.com ([74.6.129.82]:37272)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDC61-000000000E5-2zPB

for doctor@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 20:36:39 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791081335; bh=ZRUkw4dMJoJzD58h52kZE+tr1KEVgmwMHk4sOxkX6ds=; h=Date:From:Reply-To:References:Subject:From:Subject:Reply-To; b=LkP0TGW+uKrLAnPU90eePWgziKcCOMBqhq2zw9DR4tCtBCdVRCckgKDLFrhqZBQgahnga/I2uupDWbgLSPv/xH5zBLmucQTtBCeHOxVujrq9NXbp9d16W0iUc5t0yAfl42vp40n+23VQPJMc8HHNI+TaZT/5Nuk+iz505V6EYe5/CFvGNB01kxHXuR9L5+T8yOU589pRLfa/xIrdgkKBSQsYbANWZjPhoEYLLBp0hvOKWSJpeyXyCRtecOEbRVNofrRhrAygvi92lmBOTDHuK30frvdAIwcVWCQ1wF+F1Ty6zN4Tp5CaCzE/rDnU4hOKzNFCUaCT/mcgVJUyjue6BA==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791081335; bh=9to6T2scqipTi9QMRYW2IYyI8VHx2q1T5UYuXjL+pKZ=; h=X-Sonic-MF:Date:From:Subject:From:Subject; b=O4Je/V6OPYGZd9PfcICcGe4e1l+2kuKQCo6ebzBpkSaO5Jtx1pFmzYfhUk4ZKdVlFsFTKqLCOYuhffKIKKmDUEypk1ORI/Zc0IBHiPUl3p4NV39m7eO/GMh4ZaVkcIp2qDzIOtUYgjWpKZ69eY7qjfq++UmBHLoPgUb/aqGAXOvipamltbGVIUeWFDhX2+f1QGyURiUQLJZunezpWGoKj7RJ1mjslNt2gKDKKGM/Knd5NzLqD1yrr4GKwhphf7nfgLJJIOvYW3cXdqmY/G9Un7eOrQtOCkYxfFFMVw5agGYiL6rUjm3pgM0ja70z/BYZmUtIK38VdQK3LzMPCp+yzg==

X-YMail-OSG: 3WDoHtIVM1lxzvOYIBJxTkaDuGPqNfL5h.KRrSH2yilrAXUx2FO078yg1ftukFm

XBcEV255QVKGVCbI397FATHCQKq2iF_kRlbJ15Sva0vQ2QKqLU9Sj1ZV86bcv8cufkfTDUciImAR

1c1cD.uyxdyNnsom3d7anSDyHJ3Q1kDw0mYrW5zdCgUYwQQ7znvpIwZeGcoT4Z2b1jL2ZCB7ei2j

yaJ9v.3uE8Pzl3W.CYm4cRElq0qQirrT8VFmsxj5qi39vLi_XRkg3YHL_LwKy79ghW85V030f83m

SeKWlQjcj6fxUYNIdZenrpVxgIuIxZh2HgXrL0f7sdOmu2SccGghAw2n2CghbdxQIjuQRIV7zxQV

AFNuZ9idOt2Xx8zgrvLeJdCfy67mYMylpgp6cM7vb4dvA7iR0VTC40MJT7oF3Fb4DF71uzH6W8yk

rm4WFZ79CEcI1nN.rnDtswDvZu.aFSqedXUFNC9eQPAjO98YjsdY6j7x11rGaBOhGbEtWndV3AI6

JpsWo227e6JXMVGN0RzPW_._otgbOpLHUEZ5_P1xoFF6P4biZkXhPeYfAlXeeyubz10Ub1muSdQX

zUXx6mpfa1yGT7OgQ2m5wLxUXLVcNtH.CaNLfgZM_HcF5aI9_gb5EfA7E0vWlHiLE1CYzONYzRnV

_gLHlpsnQkp79mAiU0DGoSuNjIgABwxW480nN6qNskPxXTWM4CoCVS_jDZA9RQ.XQZmM0C_Eo93f

jc.TJmoIQuXibz9MJW4GlTlUkT_PCdgO5NljjPqnQuxtDSMecoZBACVMXu5YKVLsGAVzpYER2Z2T

_oSTR4kN_rxkxH0iFT2HiAcW3DY_j0KzOavri3tMYwaYgbW3NJ.aRvnLzwianRJeN7EQOHeNuitr

mY9bu_D_S.1lHMCqCnbIbk31PQQy0HyxL6ePC2CFNt4.I9iZLSTEjuvlfp8IY2HJA19rq3wjrMxV

bE3u9_QIJvmVNZRsFLQriilesld59dj.E7g8KIywP0HyS__SgyRgLwEIyBto3EHe5xJDcgdBY.pl

hHV4DD0oBTEvkCUkbYlZDj5PwSIyqtqLhFoqlt_3SOFjeYPi45yarJR2zKn8Q8tYpHiTxEuXAYLp

THn2akwW6DZi.VQ1Lppsgk63RQEPGVj.LCxT4UtNHU1EK97UpWxSYETOg0X6k_1.Ego__Shqw3JV

TW.NeFQG7LGPcwW.JSzM3i1eVWni4lIR.SbjMAZx1cqyi8x0.kN9ZRFU4H5HiFr8y4JNULXo8cD7

AiOAiHsMkDmrOb4pH0t6Nhlx6OREAiU3fQfzfSYNgf3zZSFaA4DAX8MImHZkpIAUq9s28dmJNsns

WLDBqnHFeYFeoZGyMoNqU9Or1vJYxkYRE73j.eBZJ7SrPHZd8_guh9DQC4iidxV84sr6sVMlXszS

ejiEQGveIMXBgkS5J4OxZqjUFVk7vMujAnXIyT8BT_XRtY9f7azX7GvFA6ARdKT0t1aNbgfR1BsO

4BmhDoX301lvSN5iZiy0BT0Z4SfQqCm6XrKDqRtmddBVo8c_ZUBC3HJBIFMTvzBXUPYJN6ObxA.q

FLxk68fEVGhM4LWjcVz4IVTGPMt6rl7RIIC24QWVc0LpUrkm.gkQNC00PfR_QU_u319zIFSH.CQT

dq16RBQyhVYgGzvpXyYgK2H8jIMwVfepLdj5ir1IEX70.DQ2WL2hSxCO_UJAjMPtXVoJn2LYHzNc

pa.CbEVms6a9yiX6a_aWhIHX5fRHjC2OD2rg13yjhV76kVqew42JP5unlH2rj0mtMwEEm_73e_VV

GUObk2.1di8RkHOu5R.kZiu7.Ag8.qIW8fDgqoHUM0Ab12kOIeJGWxWO4cpUx86w9cnvBq.g8fzu

gtegg0a5YxxPAdWdaCBQXHPPLBX.SMTdf9Ww7YdHIdC21PMO3RmTqz21qvvj8TMSs5qgDTyKNPN7

KhGJ7xKivzHSjI_LozBQlGTfPFmEHgrYDv3scCyz64dXFEt7DyvW3NpZGYGXmY5Yc7RVW21AP8xW

6crKSKH2A4.oaycvx0aXTPXM062t42CDUUodiqQm4ZKa1sShc6unWMmMBW8j_pdi5jf3Gw6pPIv9

b8WHKesioPAGjbMPfr4u3m8IB.cIyMYDw24E2nxgZ9opMXEk1zxy2vr_zzWhh72lx_PW3KXs7gmT

.oxna0z_9tsbIkosAyPZDHY.HUcLgkoZ6fKI1qsUZxfTSM8PmJ1PSVFvZGHdwn2N5K2rH1o9CO0e

XYV7UtV7Dg9L2EidcfS6xHyL6eAW8WUmxNN6jsCRLvoxSN.G0.yix7Ccd3tJFyEti

X-Sonic-MF:

X-Sonic-ID: dc6b5684-213b-4405-a75c-246444b1a9e9

Received: from sonic.gate.mail.ne1.yahoo.com by sonic317.consmr.mail.bf2.yahoo.com with HTTP; Sun, 4 Oct 2026 02:35:35 +0000

Date: Sun, 4 Oct 2026 02:35:31 +0000 (UTC)

From: myriam.lee002@yahoo.com

Reply-To: myriam.lee002@yahoo.com

Message-ID: <1455376361.198396.1791081331348@mail.yahoo.com>

References: <1455376361.198396.1791081331348.ref@mail.yahoo.com>

Subject: Dear Beloved One,

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Mailer: WebService/1.1.26668 YMailMini

X-Spam_score: 13.1

X-Spam_score_int: 131

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beloved One, Greetings in the name of our lord Jesus

Christ and my name is Mrs. Myriam Lee, an aging widow of (69 years old) and

I am from Ukraine, and I am suffering from the serious Bullet wound I sustained

duri [...]



Content analysis details: (13.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

[74.6.129.82 listed in dnsbl.ahbl.org]

[74.6.129.82 listed in dnsbl.ahbl.org]

[74.6.129.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.6.129.82 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[myriam.lee002(at)yahoo.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[myriam.lee002(at)yahoo.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[myriam.lee002(at)yahoo.com]

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.6.129.82 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.6.129.82 listed in bl.score.senderscore.com]

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.1 HK_SCAM No description available.

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dear Beloved One,

X-Antivirus: AVG (VPS 261003-4, 10/3/2026), Inbound message

X-Antivirus-Status: Clean



Dear=C2=A0Beloved=C2=A0One,



Greetings=C2=A0in=C2=A0the=C2=A0name=C2=A0of=C2=A0our=C2=A0lord=C2=A0Jesus=

=C2=A0Christ=C2=A0and=C2=A0my=C2=A0name=C2=A0is=C2=A0Mrs.=C2=A0Myriam=C2=A0=

Lee,=C2=A0an=C2=A0aging=C2=A0widow=C2=A0of=C2=A0(69=C2=A0years=C2=A0old)=C2=

=A0and=C2=A0I=C2=A0am=C2=A0from=C2=A0Ukraine,=C2=A0and=C2=A0I=C2=A0am=C2=A0=

suffering=C2=A0from=C2=A0the=C2=A0serious=C2=A0Bullet=C2=A0wound=C2=A0I=C2=

=A0sustained=C2=A0during=C2=A0the=C2=A0ongoing=C2=A0Ukraine=C2=A0and=C2=A0R=

ussia=C2=A0war,=C2=A0and=C2=A0I=C2=A0am=C2=A0currently=C2=A0admitted=C2=A0i=

n=C2=A0a=C2=A0private=C2=A0hospital=C2=A0here=C2=A0in=C2=A0Ukraine.



I=C2=A0have=C2=A0some=C2=A0funds=C2=A0I=C2=A0inherited=C2=A0from=C2=A0my=C2=

=A0late=C2=A0loving=C2=A0husband=C2=A0who=C2=A0also=C2=A0died=C2=A0of=C2=A0=

the=C2=A0war=C2=A0a=C2=A0few=C2=A0months=C2=A0ago=C2=A0and=C2=A0the=C2=A0su=

m=C2=A0of=C2=A0US$=C2=A04.700.000=C2=A0which=C2=A0he=C2=A0deposited=C2=A0wi=

th=C2=A0a=C2=A0Bank=C2=A0in=C2=A0Panama.



I=C2=A0am=C2=A0looking=C2=A0for=C2=A0an=C2=A0honest=C2=A0and=C2=A0God-feari=

ng=C2=A0person=C2=A0that=C2=A0can=C2=A0use=C2=A0these=C2=A0funds=C2=A0for=

=C2=A0God's=C2=A0work,=C2=A0also=C2=A0creating=C2=A0a=C2=A0charitable=C2=A0=

organization=C2=A0for=C2=A0the=C2=A0less=C2=A0privileged,=C2=A0helping=C2=

=A0the=C2=A0elderly,=C2=A0the=C2=A0poor,=C2=A0and=C2=A0also=C2=A0the=C2=A0w=

ar=C2=A0victims=C2=A0and=C2=A015%=C2=A0out=C2=A0of=C2=A0the=C2=A0total=C2=

=A0funds=C2=A0will=C2=A0be=C2=A0for=C2=A0your=C2=A0compensation=C2=A0for=C2=

=A0doing=C2=A0this=C2=A0work.



I=C2=A0found=C2=A0your=C2=A0email=C2=A0address=C2=A0from=C2=A0the=C2=A0inte=

rnet,=C2=A0and=C2=A0I=C2=A0decided=C2=A0to=C2=A0contact=C2=A0you=C2=A0after=

=C2=A0my=C2=A0prayers=C2=A0hoping=C2=A0that=C2=A0you=C2=A0will=C2=A0not=C2=

=A0betray=C2=A0the=C2=A0trust.



If=C2=A0you=C2=A0could=C2=A0be=C2=A0able=C2=A0to=C2=A0do=C2=A0this=C2=A0wor=

k,=C2=A0please=C2=A0email=C2=A0me=C2=A0back=C2=A0for=C2=A0more=C2=A0detail=

=C2=A0on=C2=A0how=C2=A0it=C2=A0could=C2=A0be=C2=A0done.



My=C2=A0warmest=C2=A0regards=C2=A0to=C2=A0you=C2=A0and=C2=A0your=C2=A0famil=

y=C2=A0and=C2=A0I=C2=A0wait=C2=A0for=C2=A0your=C2=A0positive=C2=A0reply.



Your=C2=A0Sister=C2=A0in=C2=A0Christ,



Mrs.=C2=A0Myriam=C2=A0Lee.

NIgerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 21:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDCmZ-000000007PV-2Env

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 21:20:59 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 21:20:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed2-f10.google.com ([74.125.228.74]:34639)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDBmI-00000000EnU-1Fsy

for doctor@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 20:16:15 -0600

Received: by mail-ed2-f10.google.com with SMTP id 4fb4d7f45d1cf-6aaf76d8881so501028a12.1

for ; Sat, 03 Oct 2026 19:15:16 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1791080109; cv=none;

d=google.com; s=arc-20260327;

b=ilCExb0uj5THCSr2lPmnI/Jt4W3FYmF3FehUqQ19GXczBhJnTiJ5rnEdFew4v52Ck2

IvBSSM4zXZRqcly1/bip+UeILmHdXk4AqKW8Q/ad/NKUspvp3bYdISrIeB5BvwFpUJ6c

a9DTXWbFpMBRAaq23u0i8S/ZqurRFWbcwet/KH9lhfxwRvMV2dOshyb+m9tI5uoR9PEj

bVFq3BBuPolJzfcwYBum7jJcguTOtoMV66CbNydhOtaDq7vBYHuaGfgbK1YtYwiL3wuj

tJBWs7AEjqqEm0xJeXufIdqGYOymvd60FGCQ0nxWVFQPebLSMLvORm02mXL3zzWUkKXY

0cuw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=y2ch/CoE7ZfIHLUQN8BV5R7Z7kB/cR6JF083adORKJs=;

fh=zRxMrV6KwBKvYOJanreRE+DWFBBjfWr6/fX8UbxOWX0=;

b=R4DdQr8Lydo70+pusJJfnR48emyDf25bSx7JJJgrsTIS0AW7w/p85HSQMXh5o7Te10

8yXP6KcCyj71RTDenDf6MaKd2wBKEeL9fcGuoAkvAK3gdM2gNywDcMHvf13dixXLCdN/

XVZ8FevL824j7H/j/BtpYxaF9mRRSTXyQtSa1JDK0iX93FLEXoW33DUpyhNcki8YUwhC

agyzx7Vu5uEboHCDdzI35Oq3EY4AUKS2eSLqdQ8YCyRORL4f0y7gKpJqjL9p1Mi3jaV0

3/d/cwbH4YmIKgeOBHWgycFj8a8MUxWjwEJ58wyXlRTBupuma0INlYueqUdEhbJQDP8W

vHiw==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791080109; x=1791684909; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=y2ch/CoE7ZfIHLUQN8BV5R7Z7kB/cR6JF083adORKJs=;

b=gtLRr/86ZBBrMmbx2UluIcrVJoWV1r1Y965Ih+XuFznv8n9IOPM+xfER3nhTJTQCTa

HFk/mT0rRl+KTxhEC+10YFWcnyOSw3Ei6kFYVqguvPFxVnW4/ql52d521ufrX21RWWxW

J2nl6IzYMPCvjP4xTNMroiSJAxDuAb9b/0N6wSnslLb5M9op3j+yGW4Hjf2unCW7dyx4

4vl+mMY81cYaQaB8f99leh/62qaKbEHNIz2MKa+wdkwPriliWogHe9PEM11ehkXUCZjy

s5t4TpHZ2Dqdbc+1mf36h3bYyqKogkDWPAEp0RQ2wAReoMlY3iYS659MYudaWeSK4kvm

NbLA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791080109; x=1791684909;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=y2ch/CoE7ZfIHLUQN8BV5R7Z7kB/cR6JF083adORKJs=;

b=q763QNWdC9cVwwpABlMC0D6tvViowNYHO3qfufPP+LdPyGncFsQjvTQU5ZaNm2lg7F

hpxUhymQZAmdyV9KBViwTRRmcXU66o9RpGcy8vK4GeZhbVyYtMHKgXNtF+1WRQv4hhpe

PBXmDOS1HUN/YtaQ2rkyDPYiB7bhDeQpvBKwxUIXZ65CJAuJK2+9p0KiSaSRs0nAmyph

pjta8P+WyCXXw6TZc7p5L1xdYgTW8QDRJRCM6j6jyoyd1n3pfJvUUGVZRp/BkY/B7EHj

OuYbG4DyiMfBsDZupRlCyriaN/ifyfcTbdpJquMv8yHTTy8xD38MdVttCaw/HJ4LP1i5

V3yA==

X-Forwarded-Encrypted: i=1; AKwUvBzDKaedWuYW9YwFqDxkXQ0LcOka3bNb/9xaVd3X92+vyXpj8jjVd4YmrO7PZAkHBMnukmFElSU=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFq9FYLFkfTmSbj3u7n3ADYB7ShzcTv5LqEsVq0quNKk5sod1JQ7W9XI

/+N9YrP3UQ7iSL7dVMxvp1lxZRkmBtKJrHpK6XWb7wUP60uTqC47ijEhCOH1deowYqSAsyflcdb

9KyCZOF4D3RDIMErrabkFsmwSvtDd1qw=

X-Gm-Gg: AYBFou2oVw+QB39yRboOh04lFsa1QP3Q5huB32+HCx/Cxb590k0ZzEkooCMPpQ5dlXe

bz0HmwhCDWY7yQoDPgpxTPmoW2zRPjVwKCY38Un5uWbtSU6kl6nUHCvJBn1V9LrDSJcjEbj+Vgw

jWs9+qgUpSmJT2FerGtlR7/TbaInXT1MpFDsgZuKEpcUH0JIseywNs8QWBTi/fH9LEpMTQdH4+e

yUWVTTsaF27BuF5zTvlYFEHWeuoQxLq8IzJ7jQPtGmM5Dx35uXwOIf7Ee20h/nN1uooFrVyp8lE

7eApk7wfhzaU3MbdAQCLMkYyabKHklsQzqhkag/Uzc+OfguCcnwbs3CIZg==

X-Received: by 2002:a05:6402:5d6:b0:6ac:776a:23db with SMTP id

4fb4d7f45d1cf-6af9e317e92mr5028897a12.18.1791080108923; Sat, 03 Oct 2026

19:15:08 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mrdavidmorrison33@gmail.com

From: Mr David Morris

Date: Sat, 3 Oct 2026 19:15:00 -0700

X-Gm-Features: AclHuK9IlsEAYWk1Ee8_c33o6htgyfnbaYtasVJVP40N-CtApzbqTbuPrZQQOvM

Message-ID:

Subject: Your Abandoned shipment

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a821ca065cfa5517"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 14.5

X-Spam_score_int: 145

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I am MR DAVID MORRIS, Inspection Unit Manager United Nations

Inspection Agency in Harts-field Jackson International Airport Atlanta, Georgia.

During our investigation, I discovered An abandoned shipment through a Diplomat

from United Kingdom which was transferred from JF Kennedy Airport to our

facility here in Atlanta, The two consignment b [...]



Content analysis details: (14.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.228.74 listed in dnsbl.ahbl.org]

[74.125.228.74 listed in dnsbl.ahbl.org]

[74.125.228.74 listed in dnsbl.ahbl.org]

[74.125.228.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.228.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.228.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.228.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.228.74 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.228.74 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.228.74 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.228.74 listed in bl.score.senderscore.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mrdavidmorrison33(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[gayladirector(at)gmail.com]

0.6 J_CHICKENPOX_73 BODY: 7alpha-pock-3alpha

0.6 J_CHICKENPOX_43 BODY: 4alpha-pock-3alpha

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.5 HK_NAME_FM_MR_MRS No description available.

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Your Abandoned shipment

X-Antivirus: AVG (VPS 261003-4, 10/3/2026), Inbound message

X-Antivirus-Status: Clean



--000000000000a821ca065cfa5517

Content-Type: text/plain; charset="UTF-8"



I am MR DAVID MORRIS, Inspection Unit Manager United Nations

Inspection Agency in Harts-field Jackson International Airport

Atlanta, Georgia.



During our investigation, I discovered An abandoned shipment through a

Diplomat from United Kingdom which was transferred from JF Kennedy

Airport to our facility here in Atlanta, The two consignment boxes is

worth $8 million,And I Ascertain you that the consignment is in your

name,you are advise to provide Clearance and yellow tag certificate

for claim.





Best Regards,Email me (mrdavidmorrison33@gmail.com)





David Morris



INSPECTION OFFICER



--000000000000a821ca065cfa5517

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=C2=A0I am MR DAVID MORRIS, Inspection Unit Manage=

r United Nations
Inspection Agency in Harts-field Jackson International =

Airport
Atlanta, Georgia.

During our investigation, I discovered =

An abandoned shipment through a
Diplomat from United Kingdom which was t=

ransferred from JF Kennedy
Airport to our facility here in Atlanta, The =

two =C2=A0consignment boxes is
worth $8 million,And I =C2=A0Ascertain yo=

u that the consignment is in your
name,you are advise to provide Clearan=

ce and yellow tag certificate
for claim.


Best Regards,Email m=

e (mrdavidmorrison33@gmail.c=

om)


David Morris

INSPECTION OFFICER





--000000000000a821ca065cfa5517--

loan spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 19:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDBAH-000000005Ae-0BFn

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 19:37:21 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 19:37:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [90.147.112.74] (port=42392 helo=mab.lngs.infn.it)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDA5i-00000000BST-1H9F

for root@nk.ca;

Sat, 03 Oct 2026 18:28:12 -0600

Received: from mab.lngs.infn.it (localhost [127.0.0.1])

by mab.lngs.infn.it (Proxmox) with ESMTP id 9F9A0C04225A9

for ; Sun, 4 Oct 2026 02:04:07 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lngs.infn.it; h=

cc:content-transfer-encoding:content-type:content-type:date:from

:from:message-id:mime-version:reply-to:reply-to:subject:subject

:to:to; s=pmg1; bh=/OPxHU8mwtXiToxsxLbPfZHIhED3GXYaLijrl1t2rTY=; b=

vWfvbzzCTcl2sQPcldt4eg9I7SPHxL7FYfzP5/qMENsRGTrBs9UTI3F2477jgHiO

/kyknku7qF51oajDZZ6riyI85zYWTnmuuz8tG2lLXj069Bq2WrTcRdo8Z5hiogkG

uGx88tK8jiPrB9tbmTaKflUhYkSCgBE7lLzJyGXKEI9U4y6Xtk+e+ZkPMprAHhMi

bMAIL6bNYTyNy6f4UsTq7Krj4RpbKtjZakWrSKWsRzxc7EhW1IpFiSWSoFvsHykS

glaYJeI3kWjWbeuBqZWGg+vZiPv6QJG01adc/xJ4S1J/y9QYLkyq7fZMFXtBrdTG

7YJBTRMt8muBdl/sjj9btg==

Received: from puck.lngs.infn.it (puck.lngs.infn.it [192.84.135.115])

by mab.lngs.infn.it (Proxmox) with ESMTPS

for ; Sun, 4 Oct 2026 02:04:05 +0200 (CEST)

Received: from smtp2.lngs.infn.it (smtp2.lngs.infn.it [192.84.135.130])

by puck.lngs.infn.it (8.18.1/8.18.1/Debian-6) with ESMTP id 69401LM9868712

for ; Sun, 4 Oct 2026 02:03:56 +0200

Received: from lngs.infn.it (unknown [87.249.134.39])

(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))

(No client certificate requested)

by smtp2.lngs.infn.it (Postfix) with ESMTPSA id D63F5B0FA4

for ; Sun, 4 Oct 2026 02:03:54 +0200 (CEST)

Reply-To: cjoe30487@gmail.com

From: Joe Cross

To: root@nk.ca

Subject: Hello.

Date: 03 Oct 2026 17:03:44 -0700

Message-ID: <20261003170344.1E3571794E736E4A@lngs.infn.it>

MIME-Version: 1.0

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-SPAM-PROXMOX-LEVEL:

X-PROXMOX-SPAM: no

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Looking for flexible financing to meet your personal and business

financial needs? Explore our loan options with competitive rates and flexible

repayment terms designed to suit your budget. Apply Today Fast Flexible

 Convenient



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[90.147.112.74 listed in dnsbl.ahbl.org]

[90.147.112.74 listed in dnsbl.ahbl.org]

[90.147.112.74 listed in dnsbl.ahbl.org]

[90.147.112.74 listed in dnsbl.ahbl.org]

[192.84.135.115 listed in dnsbl.ahbl.org]

[192.84.135.115 listed in dnsbl.ahbl.org]

[192.84.135.115 listed in dnsbl.ahbl.org]

[192.84.135.115 listed in dnsbl.ahbl.org]

[87.249.134.39 listed in dnsbl.ahbl.org]

[87.249.134.39 listed in dnsbl.ahbl.org]

[87.249.134.39 listed in dnsbl.ahbl.org]

[87.249.134.39 listed in dnsbl.ahbl.org]

[192.84.135.130 listed in dnsbl.ahbl.org]

[192.84.135.130 listed in dnsbl.ahbl.org]

[192.84.135.130 listed in dnsbl.ahbl.org]

[192.84.135.130 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[90.147.112.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[90.147.112.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[90.147.112.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[90.147.112.74 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[90.147.112.74 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[cjoe30487(at)gmail.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Hello.

X-Antivirus: AVG (VPS 261003-4, 10/3/2026), Inbound message

X-Antivirus-Status: Clean



Looking for flexible financing to meet your personal and business=20

financial needs?



Explore our loan options with competitive rates and flexible=20

repayment terms designed to suit your budget.



Apply Today

Fast Flexible Convenient



Eligibility, rates, terms, and approval are subject to applicable=20

requirements and conditions.















Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 10:35:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD2hS-00000000L21-0xWJ

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 10:35:02 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 10:35:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f72.google.com ([209.85.222.72]:39270)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD1a6-00000000E76-0xRG

for doctor@nk.ca;

Sat, 03 Oct 2026 09:22:58 -0600

Received: by mail-ua1-f72.google.com with SMTP id a1e0cc1a2514c-98c49d39760so5307241.1

for ; Sat, 03 Oct 2026 08:22:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=smhcostadelsol-com.20251104.gappssmtp.com; s=20251104; t=1791040914; x=1791645714; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=7EpxVTK7Luf7mc0OkJgXGGtswbhflRWL0p/tYWQWUQg=;

b=NzgmKEl4eYkXAIyN0PdfRMe50rQ+intRdL5cwBSBWtWZ3W2WCGhSIcYHTzuLJABVdv

CcZ0MlR+IIsR01tivduM3b/icJTqJOJPqEPiVFkPr6mPh2nzxd7OpxaY4ZTO/oO3x10m

QBcboZqQHF+0ZxVCQWnu7NFTmYKtypssyt3oRZrzq4syOiDR3if4FZc02WwbwWHHHMPg

VTDPtbh7X2rwUlJKY1DgNBTStYTJZg0wzh+4tSeAeRMwbyjlq2At53w0WjDjgza+Ie75

XxOcygMex1FvH+DnF9AgQayCtW1/DskaS2zj40qkvRtEJFBR5BeGejxz0p7t9hztqhP8

kS2w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791040914; x=1791645714;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=7EpxVTK7Luf7mc0OkJgXGGtswbhflRWL0p/tYWQWUQg=;

b=ft5K0e+qmmWm6DhfvbLgiQYJ4XIDU97fsCdn0u7m2Wig9YQaxJzBM1WZbHQXDPoRq3

AwCINBtnnz5xioHkqvcggYU12mAocgzTp9Bo3+XJh/ptgb2j+iyxXn3PrI76BQLMoJXj

5bmY+SUQu9bxlmJXXK6oba+FkSyRKpHjL9HFFVWfHnE1wFXTf586wu5bYbAcKyKUqQH8

QqGPU7PBcWGvruK8y6akh3cVJvmhpTRGDpTMxJrMi+lh3mIUHdHcNU8Pe3xowsK+HYt/

fnTTzvQzjnYlCJJxzBPkAgYIUPMdBAmiLtErPpLNqdK5d0r7z7Q0+RY0M/kaEDWwYXYz

J+Cg==

X-Gm-Message-State: AFq9FYIHwJ8ka7ktBDwzmNTy33D6APljlzaT7OhKcRhguLcKiVNuhtJt

AbFvK5pxFRKIZnFVTS6r5WevKTWwrAwmrbkeNTqlS7Da4F3lsMohR3QeYmDLSUVenpLfkqAers9

N8TeAaBrw/i11R4fGOvJsnyvO

MIME-Version: 1.0

X-Received: by 2002:a05:6102:4493:b0:7b4:9633:2dcd with SMTP id

ada2fe7eead31-7c0ef231831mr1093462137.0.1791040914668; Sat, 03 Oct 2026

08:21:54 -0700 (PDT)

Message-ID:

Date: Sat, 03 Oct 2026 15:21:54 +0000

Subject: =?UTF-8?Q?Uw_muur_lekt_warmte_=E2=80=94_en_subsidie_dekt_tot_30=25_van?=

=?UTF-8?Q?_de_kosten?=

From: Isolatie Advies NL

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000007f4415065cf13583"

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Isolatie Advies NL · Spouwmuurisolatie Als uw buitenmuur

koud aanvoelt van binnen, gaat er warmte verloren — elke dag, elke maand.

Spouwmuurisolatie is één van de meest effectieve woningverbeteringen die

u kunt doen. Woningen van vóór 1990 met een spouwmuur kunnen jaarlijks

€250 tot €500 besparen op stookkosten.



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.72 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: cedarshadowland.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.72 listed in bl.score.senderscore.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: cedarshadowland.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.72 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 TW_JB BODY: Odd Letter Triples with JB

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Uw_muur_lekt_warmte_=E2=80=94_en_subsidie_dekt_tot_30=25_van?=

=?UTF-8?Q?_de_kosten?=



--0000000000007f4415065cf13583

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



SXNvbGF0aWUgQWR2aWVzIE5MIMK3IFNwb3V3bXV1cmlzb2xhdGllDQoNCg0KDQpBbHMgdXcgYnVp

dGVubXV1ciBrb3VkIGFhbnZvZWx0IHZhbiBiaW5uZW4sIGdhYXQgZXIgd2FybXRlIHZlcmxvcmVu

IOKAlCBlbGtlICANCmRhZywgZWxrZSBtYWFuZC4NCg0KU3BvdXdtdXVyaXNvbGF0aWUgaXMgw6nD

qW4gdmFuIGRlIG1lZXN0IGVmZmVjdGlldmUgd29uaW5ndmVyYmV0ZXJpbmdlbiBkaWUgdSAgDQpr

dW50IGRvZW4uIFdvbmluZ2VuIHZhbiB2w7PDs3IgMTk5MCBtZXQgZWVuIHNwb3V3bXV1ciBrdW5u

ZW4gamFhcmxpamtzIOKCrDI1MCAgDQp0b3Qg4oKsNTAwIGJlc3BhcmVuIG9wIHN0b29ra29zdGVu

Lg0KDQpWaWEgZGUgSVNERS1zdWJzaWRpZXJlZ2VsaW5nIHZlcmdvZWR0IGRlIG92ZXJoZWlkIHRv

dCAzMCUgdmFuIGRlIGtvc3Rlbi4gIA0KRWVuIHZyaWpibGlqdmVuZGUgb2ZmZXJ0ZSBoZWxwdCB1

IHRlIHppZW4gd2F0IGhldCB2b29yIMO6IGJldGVrZW50Lg0KDQpWcmFhZyB1dyBncmF0aXMgd29u

aW5nY2hlY2sgYWFuIOKAlCB3aWoga2lqa2VuIG9mIHV3IGh1aXMgaW4gYWFubWVya2luZyBrb210

Lg0KDQoNCkdyYXRpcyB3b25pbmdjaGVjayBhYW52cmFnZW4g4oaSDQoNCg0KDQoNCg0KSW4gw6nD

qW4gb29nb3BzbGFnOg0KDQrinJMgQmVzcGFyaW5nOiDigqwyNTAg4oCTIOKCrDUwMCBwZXIgamFh

ciBvcCBzdG9va2tvc3Rlbg0KDQrinJMgSVNERS1zdWJzaWRpZTogdG90IDMwJSB2ZXJnb2VkIGRv

b3IgZGUgb3ZlcmhlaWQNCg0K4pyTIEVuZXJnaWVsYWJlbCB2ZXJiZXRlcnQgZGlyZWN0DQoNCuKc

kyBLbHVzIGR1dXJ0IHZhYWsgc2xlY2h0cyDDqcOpbiBkYWcNCg0KDQoNCg0KDQpJc29sYXRpZSBB

ZHZpZXMgTkwgaXMgZWVuIG9uYWZoYW5rZWxpamsgYWR2aWVzcGxhdGZvcm0uIFN1YnNpZGllYmVk

cmFnZW4gIA0KemlqbiByaWNodGxpam5lbiBlbiBhZmhhbmtlbGlqayB2YW4gYWN0dWVsZSByZWdl

bGdldmluZy4gQWZtZWxkZW4/IEtsaWsgIA0KaGllci4NCg0KDQoNCg0K

--0000000000007f4415065cf13583

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




content=3D"width=3Ddevice-width,initial-scale=3D1">
rgin:0;padding:0;background:#f5f0ea;font-family:Arial,sans-serif">


center" style=3D"padding:24px 16px">


:600px;background:#fff;border-radius:6px;overflow:hidden">










;color:#fff;font-size:13px;font-weight:bold;letter-spacing:1.5px;text-trans=

form:uppercase">Isolatie Advies NL =C2=B7 Spouwmuurisolatie




;line-height:1.35">Als uw buitenmuur koud aanvoelt van binnen, gaat er warm=

te verloren =E2=80=94 elke dag, elke maand.



S=

pouwmuurisolatie is =C3=A9=C3=A9n van de meest effectieve woningverbetering=

en die u kunt doen. Woningen van v=C3=B3=C3=B3r 1990 met een spouwmuur kunn=

en jaarlijks =E2=82=AC250 tot =E2=82=AC500 besparen op stookkosten<=

/strong>.



V=

ia de ISDE-subsidieregeling vergoedt de overheid tot 30% van de kos=

ten. Een vrijblijvende offerte helpt u te zien wat het voor =C3=BA=

betekent.



V=

raag uw gratis woningcheck aan =E2=80=94 wij kijken of uw huis in aanmerkin=

g komt.




94c00;border-radius:4px">
fe68f7c80b4a9" style=3D"display:block;padding:15px 34px;color:#fff;font-siz=

e:15px;font-weight:bold;text-decoration:none">Gratis woningcheck aanvragen =

→





ound:#fdf3ee;border-left:4px solid #b94c00;border-radius:0 4px 4px 0"><=

td style=3D"padding:18px 20px">


0">In =C3=A9=C3=A9n oogopslag:



=

=E2=9C=93 Besparing: =E2=82=AC250 =E2=80=93 =E2=82=AC500 per jaar op stookk=

osten



=

=E2=9C=93 ISDE-subsidie: tot 30% vergoed door de overheid



=

=E2=9C=93 Energielabel verbetert direct



=E2=9C=

=93 Klus duurt vaak slechts =C3=A9=C3=A9n dag






#eee">

Isolatie =

Advies NL is een onafhankelijk adviesplatform. Subsidiebedragen zijn richtl=

ijnen en afhankelijk van actuele regelgeving. Afmelden?
cedarshadowland.org/t/c/523d680fe68f7c80b4a9" style=3D"color:#bbb">Klik hie=

r.






1" height=3D"1" alt=3D"">

--0000000000007f4415065cf13583--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 10:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD2h5-00000000Kze-33Q7

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 10:34:39 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 10:34:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f71.google.com ([209.85.217.71]:57752)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD0mj-00000000OOM-39mR

for doctor@nk.ca;

Sat, 03 Oct 2026 08:31:57 -0600

Received: by mail-vs1-f71.google.com with SMTP id ada2fe7eead31-7bf21ebcc4aso501013137.3

for ; Sat, 03 Oct 2026 07:31:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=aluno-mg-gov-br.20251104.gappssmtp.com; s=20251104; t=1791037855; x=1791642655; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=o7KtsxZAITdLEV5CasGfLFEkrrcblayuKOEswaObRFs=;

b=rKPGnVnoFNdUgejpno2saTqwHyBTpZiPZ6/+Rz/5bGgrRgE5StYPO15rNjVrsmCJFv

0S2TYNT7+SBF7essBkoLz2RuND6MKiBbfp2OLhGhgW9Tu+oZ3po1Sa+Yy8yDzJ8pLBHk

BRENt5DRStBWWtiCfp1T7mU6xeWLVNiwrneR4hKKzkZ4IckgQS6PYpXiDiqPWfK6w4UQ

Kjt5OwarH7rAEwwqOXLdQ9R5OG1pFirX3S2WRaMFAruO88yg6lc6MEnRmp6hXr/ykg4K

UEXc6NAnXUN566smEuXUJ+acucJfo9kiSlJJHnXBagDC2aOichrzUGSmO7svW5vN2q2j

ooow==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791037855; x=1791642655;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=o7KtsxZAITdLEV5CasGfLFEkrrcblayuKOEswaObRFs=;

b=GRnkSc+BoEyegEREZm9hAEcozt4Xy6Vtm2LLPi0szGFwJV7medM26U0IUPF1Itutq1

dIdlacwUMX0oUlzlEh1VnBXVINHEewpmwoTxA9PrfyaZhWjCIRMIuUz0rNMtGvSw2Jsf

neXSeAk8DWROCv1cpCj6ft3aHugi+eDuQ9IE9YqDbZQ65X6ZuOdrgzgwgQgxFPlyU2hU

lal43nnDeetC0DJwO1oeFGbcY8jiwueEKNTvk4GCj2j5X3Chbi1RjZXoOm0vsCoVwBqr

ok0FjTJgU3MEErie1VbGOjmk76wssdIRTMYZ34mhieN4RaTHhyvBlnEHcyx590dkNC3T

t68Q==

X-Gm-Message-State: AFq9FYJu6B8onBA+Q2lzHt8r6jR20TbtSuxsqy8dfDjyx8vPWlocq7VU

/wfN0TEPlpPegzutKfrMFeuhEUIwzmw+mtkqou0FQ7FQX6Gc+M7yUn/v66IpIDcTtcLqXZv/Xei

mbW/KH16L6QO58COtPOKrJwJxUWphgnA4aSX/6fTuBP6A8dXNYML6R6p8JMCEbxD61hxSxg==

MIME-Version: 1.0

X-Received: by 2002:a05:6102:915:b0:7bf:7f78:8617 with SMTP id

ada2fe7eead31-7c2425ee438mr722171137.5.1791037854695; Sat, 03 Oct 2026

07:30:54 -0700 (PDT)

Message-ID:

Date: Sat, 03 Oct 2026 14:30:54 +0000

Subject: Bespaar tot 30% op uw energierekening met isolatie

From: Isolatie Expert NL

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000001bdf25065cf07f43"

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: IsolatieExpert Nederland · Energiebesparing Warmer wonen,

lagere rekening Bespaar tot 30% op uw energierekening met goede isolatie



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.71 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: brandarealtor.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.217.71 listed in bl.score.senderscore.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: brandarealtor.com]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: brandarealtor.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.71 listed in wl.mailspike.net]

0.1 TW_JB BODY: Odd Letter Triples with JB

0.1 TW_JD BODY: Odd Letter Triples with JD

0.1 TW_JK BODY: Odd Letter Triples with JK

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Bespaar tot 30% op uw energierekening met isolatie



--0000000000001bdf25065cf07f43

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: quoted-printable



IsolatieExpert Nederland =C2=B7 Energiebesparing















Warmer wonen, lagere rekening



Bespaar tot 30% op uw energierekening met goede isolatie



Een slecht ge=C3=AFsoleerde woning laat kostbare warmte ontsnappen via het =

dak, =20

de muren en de vloer. Met de juiste isolatie houdt u de warmte binnen en =

=20

gaat uw stookkostenrekening merkbaar omlaag.











=E2=9C=93 Tot ~30% lagere stookkosten =E2=80=94 indicatief, afhankelijk van=

uw woning



=E2=9C=93 Subsidie mogelijk =E2=80=94 check of u in aanmerking komt voor ee=

n bijdrage



=E2=9C=93 Meer wooncomfort =E2=80=94 geen tocht en een aangenamere temperat=

uur











Ontvang een gratis vrijblijvende check van uw woning. Een isolatie-adviseur=

=20

kijkt naar uw situatie en berekent welke besparing en welke subsidie voor u=

=20

haalbaar zijn. U zit nergens aan vast.











Bekijk mijn mogelijkheden =E2=86=92











Gratis & vrijblijvend =C2=B7 Onafhankelijk advies =C2=B7 Geen verplichtinge=

n











De genoemde besparings- en subsidiebedragen zijn indicatief en afhankelijk =

=20

van uw woning en persoonlijke situatie; er kunnen geen rechten aan worden =

=20

ontleend. Aan een gratis check zijn geen kosten of verplichtingen verbonden=

.



U ontvangt deze e-mail omdat u zich heeft aangemeld voor aanbiedingen over =

=20

wonen en energie.



Uitschrijven











--=20





PRESERVE A NATUREZA, EVITE O DESPERD=C3=8DCIO DE PAPEL E PENSE ANTES DE=20

IMPRIMIR.



"Responsabilidade com o MEIO AMBIENTE"



Esta mensagem e=20

quaisquer arquivos em anexo podem conter informa=C3=A7=C3=B5es confidenciai=

s e/ou=20

privilegiadas. Se voc=C3=AA n=C3=A3o for o destinat=C3=A1rio ou a pessoa au=

torizada a=20

receber esta mensagem, por favor n=C3=A3o leia, copie, repasse, imprima, gu=

arde,=20

nem tome qualquer a=C3=A7=C3=A3o baseada nestas informa=C3=A7=C3=B5es. Por =

favor notifique o=20

remetente imediatamente por e-mail e apague a mensagem permanentemente.=20

Este ambiente est=C3=A1 sendo monitorado para evitar o uso indevido de noss=

os=20

sistemas.



--0000000000001bdf25065cf07f43

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"margin:0;padding:0;background-color:#eceae3;">










ing=3D"0" border=3D"0" style=3D"width:600px;max-width:600px;background-colo=

r:#ffffff;border-radius:10px;overflow:hidden;font-family:Arial,Helvetica,sa=

ns-serif;border:1px solid #dcd9cf;">






















































































ellspacing=3D"0" border=3D"0">










s-serif;font-size:19px;font-weight:bold;color:#ffffff;letter-spacing:0.3px;=

">

IsolatieExpert
ns-serif;font-size:12px;color:#c8d3c4;">

Nederland · Energiebesparing



lor:#8bbf5a;"> 



ellspacing=3D"0" border=3D"0">




















s-serif;font-size:13px;font-weight:bold;color:#5c7a4a;text-transform:upperc=

ase;letter-spacing:1.2px;padding-bottom:10px;">

Warmer wonen, lagere rekening

Roman',serif;font-size:29px;line-height:1.25;color:#2f3a33;font-weight:bold=

;padding-bottom:16px;">

Bespaar tot 30% op uw energierekening met goede isolatie

s-serif;font-size:16px;line-height:1.6;color:#48524a;padding-bottom:8px;">

Een slecht geïsoleerde woning laat kostbare warmte o=

ntsnappen via het dak, de muren en de vloer. Met de juiste isolatie houdt u=

de warmte binnen en gaat uw stookkostenrekening merkbaar omlaag.





ellspacing=3D"0" border=3D"0" style=3D"background-color:#f3f6ee;border-radi=

us:8px;border:1px solid #dfe8d4;">




















sans-serif;font-size:15px;line-height:1.5;color:#2f3a33;border-bottom:1px s=

olid #e2ead8;">

✓ =

Tot ~30% lagere stookkosten — indicatief, afhankelijk van uw w=

oning

sans-serif;font-size:15px;line-height:1.5;color:#2f3a33;border-bottom:1px s=

olid #e2ead8;">

✓ =

Subsidie mogelijk — check of u in aanmerking komt voor een bij=

drage

sans-serif;font-size:15px;line-height:1.5;color:#2f3a33;">

✓ =

Meer wooncomfort — geen tocht en een aangenamere temperatuur





ellspacing=3D"0" border=3D"0">








s-serif;font-size:16px;line-height:1.6;color:#48524a;">

Ontvang een gratis vrijb=

lijvende check van uw woning. Een isolatie-adviseur kijkt naar uw =

situatie en berekent welke besparing en welke subsidie voor u haalbaar zijn=

. U zit nergens aan vast.





" border=3D"0">








dius:6px;">


ae22" style=3D"display:inline-block;padding:16px 38px;font-family:Arial,Hel=

vetica,sans-serif;font-size:17px;font-weight:bold;color:#ffffff;text-decora=

tion:none;border-radius:6px;background-color:#5c7a4a;">Bekijk mijn mogelijk=

heden →





ellspacing=3D"0" border=3D"0" style=3D"border-top:1px solid #e6e3da;">








Arial,Helvetica,sans-serif;font-size:13px;line-height:1.5;color:#7a8378;">

Gratis & vrijblijvend · Onafhankelijk advies &=

middot; Geen verplichtingen





ellspacing=3D"0" border=3D"0">








s-serif;font-size:11px;line-height:1.6;color:#a9b3a4;">

De genoemde besparings- en subsidiebedragen zijn indicati=

ef en afhankelijk van uw woning en persoonlijke situatie; er kunnen geen re=

chten aan worden ontleend. Aan een gratis check zijn geen kosten of verplic=

htingen verbonden.





U ontvangt deze e-mail omdat u zich heeft aangemeld voor =

aanbiedingen over wonen en energie.






ae22" style=3D"color:#c8d3c4;text-decoration:underline;">Uitschrijven







height=3D"1" alt=3D"">





le=3D"font-size:11px">PRESERVE A NATUREZA, EVITE O DES=

PERD=C3=8DCIO DE PAPEL E PENSE ANTES DE IMPRIMIR.


=3D"font-family:Arial">"Responsabilidade com o MEIO AMBIENTE"
an>


255)">Esta mensagem e q=

uaisquer arquivos em anexo podem conter informa=C3=A7=C3=B5es confidenciais=

e/ou privilegiadas. Se voc=C3=AA n=C3=A3o for o destinat=C3=A1rio ou a pes=

soa autorizada a receber esta mensagem, por favor n=C3=A3o leia, copie, rep=

asse, imprima, guarde, nem tome qualquer a=C3=A7=C3=A3o baseada nestas info=

rma=C3=A7=C3=B5es. Por favor notifique o remetente imediatamente por e-mail=

e apague a mensagem permanentemente. Este ambiente est=C3=A1 sendo monitor=

ado para evitar o uso indevido de nossos sistemas.



--0000000000001bdf25065cf07f43--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 08:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD0b2-0000000040r-3bXF

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 08:20:16 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 08:20:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f200.google.com ([209.85.128.200]:55755)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <3mgnBag0ZBg8p2vvxt.89t78px278x8983p1pE32xr3.ts9.4ts3r8362z.rp@maestro.bounces.google.com>)

id 1xD0Fc-000000001O6-445R

for doctor@nk.ca;

Sat, 03 Oct 2026 07:57:44 -0600

Received: by mail-yw1-f200.google.com with SMTP id 00721157ae682-8ae99a44bdbso1616017b3.3

for ; Sat, 03 Oct 2026 06:56:48 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=institutoamazonico-edu-pe.20251104.gappssmtp.com; s=20251104; t=1791035802; x=1791640602; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=LKi65VNtrCloscndkrS077NQOw5neF3JJ2BbVcUYSrw=;

b=mxAnm48+ehhfHMXxw7xvT+PGnfjSquZwuzkjbZfDdAoRqLy7EAkhfFgWvG/sfrCtCR

iOIk+FAdI3aYg1LIcY3eILuipKEg+zu1mrsjV61h3tCBrC28T/SioaYGPjM8d5WYNjgh

wyZkl5cLD4FLygotaEzgZQBveb+F78wyjjwe72KE4oYqyCMzLoPIpLEcPZLfKwqWAaNs

DD437238VzACu4g4XXPWg41c1ywGYQuZPyaFGw72WveHXI2wWbtWSg9WT5dO5ViyWZM1

VZxvRwPryrJDWZqVhQ9LHk4lHsMFBxOXYM8jt7DgNgREyqGqlFeB8h5+PUhxAeuJOMwT

t0eA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791035802; x=1791640602;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=LKi65VNtrCloscndkrS077NQOw5neF3JJ2BbVcUYSrw=;

b=J2XO0rU1nG9A/9hALIpfsMS7/95MqwvbSQy5Ulutv6fp/TKj/+ZQkAnvvsDLQaN7Av

tbo88ApPH0lBDiS1iGa5ikpesoLIEo0l03bQuD1WT/TtG7BBp+IhpXsRcdKpQfLrXTP8

8L/Fk9pXzr7pZYHFNkGew+Td1VilRw6cBDHatrfhE0kW8Ff/4XO+ZFiWA6yVYuoNOgzH

4YPZikzU7NsK+uCr3VVCWqObHZPqX2EMIcmPw0bHmHYlyX87WaLsvV7Qc+ZHqbH4WLSI

r2HX7o7DRg3SJ3NmVc2jTCWARuya599/Yl2LyUwZ6TKMHT7iBUB/EcgRBcaMW3f1iIIL

rLYg==

X-Gm-Message-State: AFq9FYJGD/dmJUNCbG4br8YlAl+kyBSMZPA3TT5XC34Zi+aNc16CWSrM

EVMvw5kasZp2XK6RBdYQ21wzrsmvDl4o3LaWaxC4q366hhwXP0FHvNzkvSk4TaVgPSNLQ4gu0wf

Rz/92mMMg2Lwo1ThK9ef5EWGH

MIME-Version: 1.0

X-Received: by 2002:a05:690e:4395:b0:671:3e25:ec33 with SMTP id

956f58d0204a3-677abe020a0mr1110688d50.18.1791035802185; Sat, 03 Oct 2026

06:56:42 -0700 (PDT)

Message-ID:

Date: Sat, 03 Oct 2026 13:56:42 +0000

Subject: Uw gemeente in beeld: thuisbatterij zonder investering mogelijk?

From: Landelijk Energieopslag Loket

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000c504f6065cf00415"

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Landelijk Energieopslag Loket Straat in het donker tijdens

stroomuitval UW GEMEENTE IN BEELD



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.200 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: carrotshard.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: carrotshard.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: carrotshard.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.200 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_JF BODY: Odd Letter Triples with JF

0.1 TW_IJ BODY: Odd Letter Triples with IJ

0.1 TW_IK BODY: Odd Letter Triples with IK

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.200 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

Subject: {SPAM?} Uw gemeente in beeld: thuisbatterij zonder investering mogelijk?



--000000000000c504f6065cf00415

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TGFuZGVsaWprIEVuZXJnaWVvcHNsYWcgTG9rZXQNCg0KU3RyYWF0IGluIGhldCBkb25rZXIgdGlq

ZGVucyBzdHJvb211aXR2YWwNCg0KDQpVVyBHRU1FRU5URSBJTiBCRUVMRA0KDQpFZW4gdGh1aXNi

YXR0ZXJpaiB6b25kZXIgZWlnZW4gaW52ZXN0ZXJpbmcg4oCUIGtvbXQgdXcgYWRyZXMgaW4gYWFu

bWVya2luZz8NCg0KDQoNCkJpaiBzdHJlbmdlIGtvdSByYWFrdCBoZXQgc3Ryb29tbmV0IG9wIHN0

ZWVkcyBtZWVyIHBsYWF0c2VuIG92ZXJiZWxhc3QuICANClZhbHQgZGUgc3Ryb29tIHdlZywgZGFu

IGdhYW4gdmVyd2FybWluZywgd2lmaSBlbiBsaWNodCBtZWUuIE1ldCBlaWdlbiAgDQpvcHNsYWcg

aW4gaHVpcyBob3VkdCB1IGRlIGJhc2lzIGRyYWFpZW5kZSDigJQgZW4gdmlhIGhldCBsb2tldCBr

YW4gZGF0IGluICANCnZlZWwgZ2VtZWVudGVuIHpvbmRlciBpbnZlc3RlcmluZyB2b29yYWYuDQoN

Cg0KDQoNCg0KTGljaHQgYmxpamZ0IGFhbg0KDQpCaWogZWVuIHN0b3JpbmcgYmxpanZlbiB1dyBi

YXNpc3Zvb3J6aWVuaW5nZW4gd2Vya2VuLg0KDQoNClpvbmRlciBpbnZlc3RlcmluZw0KDQpJbiB2

ZWVsIGdlbWVlbnRlbiBtb2dlbGlqayB6b25kZXIgYWFua29vcCB2b29yYWYuDQoNCg0KDQoNCkxh

Z2VyZSBsYXN0ZW4NCg0KR2VicnVpayB1dyBlaWdlbiBzdHJvb20gb3AgaGV0IG1vbWVudCBkYXQg

aGV0IHRlbHQuDQoNCg0KQmVwZXJrdCBiZXNjaGlrYmFhcg0KDQpQbGVra2VuIGVuIGJ1ZGdldCB2

ZXJzY2hpbGxlbiBwZXIgcmVnaW8uDQoNCg0KDQoNCg0KRG9lIGRlIHdvbmluZ2NoZWNrIMK7DQoN

Cg0KQmlubmVuIDEgbWludXV0IHdlZXQgdSBvZiB1dyBhZHJlcyBpbiBhYW5tZXJraW5nIGtvbXQu

DQoNCg0KDQpVIG9udHZhbmd0IGRlemUgZS1tYWlsIG9tZGF0IHUgaW50ZXJlc3NlIHRvb25kZSBp

biBlbmVyZ2llYmVzcGFyaW5nLiAgDQpCZXNjaGlrYmFhcmhlaWQgZW4gdm9vcndhYXJkZW4gdmVy

c2NoaWxsZW4gcGVyIGdlbWVlbnRlIGVuIHppam4gYWZoYW5rZWxpamsgIA0KdmFuIHV3IHNpdHVh

dGllLg0KDQpBZm1lbGRlbg0KDQoNCg0KDQo=

--000000000000c504f6065cf00415

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable








schemas-microsoft-com:office:office">









Thuisbatterij zonder investering






=3D"0" border=3D"0" style=3D"background:#0e1726;">






"0" border=3D"0" style=3D"width:600px;max-width:600px;font-family:Arial,Hel=

vetica,sans-serif;background:#ffffff;border-radius:16px;overflow:hidden;">


















































etlogo.png" alt=3D"Landelijk Energieopslag Loket" width=3D"220" style=3D"di=

splay:block;width:220px;max-width:70%;height:auto;border:0;">




decoration:none;display:block;">


etimg.webp" alt=3D"Straat in het donker tijdens stroomuitval" width=3D"600"=

style=3D"display:block;width:100%;max-width:600px;height:auto;border:0;">






letter-spacing:1px;">UW GEMEENTE IN BEELD




ight:800;">Een thuisbatterij zonder eigen investering — komt uw adres=

in aanmerking?







Bij strenge kou raakt het stroomnet op steeds meer plaatsen overbelast. Val=

t de stroom weg, dan gaan verwarming, wifi en licht mee. Met eigen opslag i=

n huis houdt u de basis draaiende — en via het loket kan dat in veel =

gemeenten zonder investering vooraf.






=3D"0" border=3D"0">






















">Licht blijft aan



Bij ee=

n storing blijven uw basisvoorzieningen werken.




">Zonder investering



In vee=

l gemeenten mogelijk zonder aankoop vooraf.





">Lagere lasten



Gebrui=

k uw eigen stroom op het moment dat het telt.




">Beperkt beschikbaar



Plekke=

n en budget verschillen per regio.









round:#c9862b;border-radius:10px;color:#ffffff;display:block;max-width:440p=

x;font-size:17px;font-weight:bold;line-height:20px;padding:16px 24px;text-a=

lign:center;text-decoration:none;box-sizing:border-box;margin:0 auto;">Doe =

de woningcheck »





Binnen 1 minuut weet u =

of uw adres in aanmerking komt.







U ontvangt deze e-mail omdat u interesse toonde in energiebesparing. Beschi=

kbaarheid en voorwaarden verschillen per gemeente en zijn afhankelijk van u=

w situatie.




:#8a929b;text-decoration:underline;">Afmelden














eight=3D"1" alt=3D"">

--000000000000c504f6065cf00415--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 08:20:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD0ax-0000000040I-3ehG

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 08:20:11 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 08:20:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f198.google.com ([209.85.167.198]:43175)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xCzud-00000000PAw-1OEI

for doctor@nk.ca;

Sat, 03 Oct 2026 07:36:03 -0600

Received: by mail-oi1-f198.google.com with SMTP id 5614622812f47-4f4612a1a5cso1033736b6e.0

for ; Sat, 03 Oct 2026 06:35:06 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sc.senai.br; s=google; t=1791034500; x=1791639300; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=S1zNXUTffcxLlHw1n1W1dqzwDuICvxaTYi4PAcgEpus=;

b=MU2rpv5DTlr8exx16SKyXJteN2OyHbupxpgLxAuE7ICX5Wzpz5WRHefPdldpJhlImU

WaRpgW2Fqa1xrc7mDhlfvAT29xsMpvc09UwUPVYlMkw1CvucFf3j8s0abmAr1IUcIG+c

Dv77cg0qZ12j3gACtKuadrwmDOCrlNF3f/65o=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791034500; x=1791639300;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=S1zNXUTffcxLlHw1n1W1dqzwDuICvxaTYi4PAcgEpus=;

b=d0DzKE4KmMXo7PruihTmjp5Nv4rwqCuhBYSMhaVul1h1xfG5LWuqLuI6rn+tORtieF

a7U4Ra1Nk9pZLXv41QsjdeuGx4RDsY3R370GbTf/agPHzWMqMa5qBivHT+pYTkUOLOCT

+ZS/55NrOP2HT42H361s8CjgOGLfkV+RqFYJUQojsfhtRO1hZNaplv4nx4tI/V6VV3dP

b//n7B93REH920A5V2XhJfB3y/UXE0Q1QEz2InZ+bGDXO+tuY+yFkdVFHmc4ktiFFVxs

nkl1ioXgDHHkuBw5eT9/5EA5xLCyhtzBkoMl+ge2BUAHNwNfZPb54EzcCQWMdjXQl/BK

VZyw==

X-Gm-Message-State: AFuF++nR0ZsnzTiIGrfkgLf7L5vKmhCs+aKoHwXMg1o1g/Oy0BenPjq0

8roqj315TOxOehOeAhAnD2Jd03XDVZ+LG7k+QUxzNMO0CQBPBkZaS4f8HNlinc2wHgd9RB8zI8b

N579eu+/DEKtupBj+v25+vi2s

MIME-Version: 1.0

X-Received: by 2002:a05:6808:2389:b0:4af:aaca:7be3 with SMTP id

5614622812f47-4f307f076ddmr7602356b6e.12.1791034499907; Sat, 03 Oct 2026

06:34:59 -0700 (PDT)

Message-ID:

Date: Sat, 03 Oct 2026 13:34:59 +0000

Subject: =?UTF-8?Q?Bespaar_tot_30=25_op_uw_stookkosten_=E2=80=94_gratis_advies?=

From: Nationaal Isolatie Advies

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000025d342065cefb753"

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ✓ GRATIS ISOLATIEADVIES · GECERTIFICEERDE INSTALLATEURS

Nationaal Isolatie Advies Bespaar tot 30% op uw stookkosten met goede isolatie.





Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

[209.85.167.198 listed in dnsbl.ahbl.org]

[209.85.167.198 listed in dnsbl.ahbl.org]

[209.85.167.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: carrotphantom.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: carrotphantom.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.198 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.198 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 TW_JB BODY: Odd Letter Triples with JB

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.198 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?Q?Bespaar_tot_30=25_op_uw_stookkosten_=E2=80=94_gratis_advies?=



--00000000000025d342065cefb753

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



4pyTIEdSQVRJUyBJU09MQVRJRUFEVklFUyDCtyBHRUNFUlRJRklDRUVSREUgSU5TVEFMTEFURVVS

Uw0KDQoNCg0KTmF0aW9uYWFsIElzb2xhdGllIEFkdmllcw0KDQpCZXNwYWFyIHRvdCAzMCUgb3Ag

dXcgc3Rvb2trb3N0ZW4gbWV0IGdvZWRlIGlzb2xhdGllLg0KDQpHcmF0aXMgZW4gdnJpamJsaWp2

ZW5kIGlzb2xhdGllYWR2aWVzIHZvb3IgdXcgd29uaW5nLg0KDQoNCg0KU2xlY2h0IGdlw69zb2xl

ZXJkZSB3b25pbmdlbiB2ZXJsaWV6ZW4gdmVlbCB3YXJtdGUg4oCUIGVuIGR1cyBnZWxkLiBNZXQg

ZGUgIA0KanVpc3RlIGlzb2xhdGllIGt1bnQgdSB0b3QgMzAlIGJlc3BhcmVuIG9wIHV3IHZlcndh

cm1pbmdza29zdGVuLiBWcmFhZyBudSAgDQpncmF0aXMgYWR2aWVzIGFhbiBlbiBvbnRkZWsgd2Vs

a2UgaXNvbGF0aWVtYWF0cmVnZWxlbiB2b29yIHV3IHdvbmluZyBoZXQgIA0KbWVlc3Qgb3BsZXZl

cmVuLg0KDQoNCg0KMzAlDQoNCm1pbmRlciBzdG9va2tvc3Rlbg0KDQrigqwwDQoNCmdyYXRpcyBh

ZHZpZXMNCg0KMiBtaW4NCg0KYWFudnJhZ2VuDQoNCg0KDQoNCk9udHZhbmcgZ3JhdGlzIGlzb2xh

dGllYWR2aWVzIOKGkg0KDQoNCg0KQmVyZWtlbiBtaWpuIGJlc3BhcmluZyDihpINCg0KDQpHcmF0

aXMgZW4gdnJpamJsaWp2ZW5kIGFkdmllcy4gR2VjZXJ0aWZpY2VlcmRlIGlzb2xhdGllYmVkcmlq

dmVuIGluIHV3ICANCnJlZ2lvLiBHZWVuIHZlcnBsaWNodGluZ2VuLg0KDQoNCg0KQWZtZWxkZW4g

dmFuIGRpdCBhYW5ib2QgwrcgQWxsZSBlLW1haWxzIGFmbWVsZGVuDQoNCg0KDQoNCg==

--00000000000025d342065cefb753

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable
















l=3Dno,date=3Dno,url=3Dno">




,Arial,sans-serif;">


=3D"0" border=3D"0" style=3D"background:#0d1a0d;">






"0" border=3D"0" style=3D"max-width:600px;width:100%;">




























255,0.06);padding:10px 24px;">


color:#22c55e;">=E2=9C=93 GRATIS ISOLATIEADVIES =C2=B7 GECERTIFICEERDE INST=

ALLATEURS






g:2px;color:#22c55e;text-transform:uppercase;">Nationaal Isolatie Advies
>


f;line-height:1.3;">Bespaar tot 30% op uw stookkosten met goede isolatie.
p>

Gra=

tis en vrijblijvend isolatieadvies voor uw woning.






8;">Slecht ge=C3=AFsoleerde woningen verliezen veel warmte =E2=80=94 en dus=

geld. Met de juiste isolatie kunt u tot 30% besparen op uw verwarmingskost=

en. Vraag nu gratis advies aan en ontdek welke isolatiemaatregelen voor uw =

woning het meest opleveren.








ng=3D"0" border=3D"0" style=3D"margin-bottom:20px;">
















a(255,255,255,0.08);border-radius:8px;padding:12px 6px;width:31%;">


>30%



minder st=

ookkosten
a(255,255,255,0.08);border-radius:8px;padding:12px 6px;width:31%;">


>=E2=82=AC0



gratis ad=

vies
a(255,255,255,0.08);border-radius:8px;padding:12px 6px;width:31%;">


>2 min



aanvragen=







=3D"0" width=3D"100%" style=3D"margin-bottom:12px;">




r;">


=3D"_blank" style=3D"display:block;font-size:15px;font-weight:700;color:#00=

0;padding:16px 24px;text-decoration:none;">Ontvang gratis isolatieadvies =

=E2=86=92








=3D"0" width=3D"100%" style=3D"margin-bottom:20px;">




center;">


=3D"_blank" style=3D"display:block;font-size:13px;font-weight:700;color:#22=

c55e;padding:12px 24px;text-decoration:none;">Bereken mijn besparing =E2=86=

=92





Gra=

tis en vrijblijvend advies. Gecertificeerde isolatiebedrijven in uw regio. =

Geen verplichtingen.




,0.05);padding:14px 24px;">




=3D"color:#4a7c4a;">Afmelden van dit aanbod  · 


=3D"color:#4a7c4a;">Alle e-mails afmelden








height=3D"1" style=3D"display:none;border:0;" alt=3D"">





--00000000000025d342065cefb753--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 08:20:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD0ar-000000003zz-3iWa

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 08:20:05 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 08:20:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f69.google.com ([209.85.216.69]:44315)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <100503pior@depedmarikina.ph>)

id 1xCzhO-00000000NTb-1GIF

for doctor@nk.ca;

Sat, 03 Oct 2026 07:22:22 -0600

Received: by mail-pj1-f69.google.com with SMTP id 98e67ed59e1d1-39de4a68f7cso259125a91.1

for ; Sat, 03 Oct 2026 06:21:26 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=depedmarikina-ph.20251104.gappssmtp.com; s=20251104; t=1791033680; x=1791638480; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=RKOarflyVP7qDjLqlxE0eNwxPZ2BwNYob/J1UwD69d0=;

b=VdedxYanPiEnHQj41T+B5xxNqscbU1YmtsEu5ioFQJnJM6VHWkCn41B/mqBgUv4Q/E

uM+fN7eHXa9OqP9XUF340PI403PAIKS1XwzSN/Rib1BgLLq0c92xK7VxflhgqMdfISD0

jXT18UQLIcqlohvhUWfMGZLQTXanWNO4zDwNuAIS28RIi39nxgSmJUB/9HFccQqtNIsz

iGrmiFMvweVwGDG4ZyCsxYJj9xkceLUYv9vPeH9Ho1tn7AvQpAuAm924h/8pltxbiKu5

yJ5PnRrFpP4d9FlyScenoJy9uFcKFmss0j+cS0vnef+N6DAsV237qWyjdv04CvNEpwh+

aZ4A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791033680; x=1791638480;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=RKOarflyVP7qDjLqlxE0eNwxPZ2BwNYob/J1UwD69d0=;

b=NZkcuJEIpBnaU8JXXJoS82PZpbnntoeHQnH4W5g3+5YSxVdO/fuB1obsmaokhq15OH

cg69EDEt/rEhht+brGNNO3mUOtEE7LlBAGyT/PDadP93ACKT3+l57+qAA+JRDCY8W9k+

VjrN3GABqUPlB9dMF1fBWAHKxnz4Kh2PGGc//ldE+lFuElyM6dfVPidObHG3lkOSXIXK

SakzE4fZEsySNGMhRfPoP1kTXJd6fLDDxhJNxjzuuqqBwgrVfa8QueQTCqi4uaZJNg9y

Dxc30NYARlZEm+DWnsujh/BiH8Do1916gnZgW/pLZUoKPiNdhgv668IcnJMzJA8+uH57

n2SA==

X-Gm-Message-State: AFq9FYLjHaSRalAUwcJMPTx8xFobhszJDj4VK9DYZ+IgePfBVbatqY3L

zfS2pr78wFgE+gKDkjN/gBYaFFr6o3UFaarlg6TJt0PiFrewCrn4xc9Xx3nIP2As/zQMJqxIIdt

K+wGcwZk+LrrdGKGq3USiieg+

MIME-Version: 1.0

X-Received: by 2002:a17:902:d2c4:b0:2dd:c100:7cc8 with SMTP id

d9443c01a7336-2e49b7f6fe1mr52299405ad.68.1791033680064; Sat, 03 Oct 2026

06:21:20 -0700 (PDT)

Message-ID:

Date: Sat, 03 Oct 2026 13:21:20 +0000

Subject: Schilderwerk voor een vast bedrag per maand - zo werkt het

From: VerfZeker Woningcheck <100503pior@depedmarikina.ph>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000480627065cef865f"

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: VerfZeker Onderhoud buitenschilderwerk Zelf uw schilderwerk

blijven regelen, of een vast bedrag per maand? Beide kan. Maar zet het eens

naast elkaar — het verschil is groter dan u denkt.



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

[209.85.216.69 listed in dnsbl.ahbl.org]

[209.85.216.69 listed in dnsbl.ahbl.org]

[209.85.216.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: businesssuccess.xyz]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: businesssuccess.xyz]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.69 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: businesssuccess.xyz (xyz)]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.69 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.69 listed in list.dnswl.org]

0.1 TW_JF BODY: Odd Letter Triples with JF

0.1 TW_IJ BODY: Odd Letter Triples with IJ

0.1 TW_PZ BODY: Odd Letter Triples with PZ

0.1 TW_JB BODY: Odd Letter Triples with JB

0.1 TW_JS BODY: Odd Letter Triples with JS

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Schilderwerk voor een vast bedrag per maand - zo werkt het



--000000000000480627065cef865f

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



VmVyZlpla2VyIE9uZGVyaG91ZCBidWl0ZW5zY2hpbGRlcndlcmsNCg0KDQoNCg0KWmVsZiB1dyBz

Y2hpbGRlcndlcmsgYmxpanZlbiByZWdlbGVuLA0Kb2YgZWVuIHZhc3QgYmVkcmFnIHBlciBtYWFu

ZD8NCg0KQmVpZGUga2FuLiBNYWFyIHpldCBoZXQgZWVucyBuYWFzdCBlbGthYXIg4oCUIGhldCB2

ZXJzY2hpbCBpcyBncm90ZXIgZGFuIHUgIA0KZGVua3QuDQoNCg0KDQoNClplbGYgcmVnZWxlbiBN

ZXQgVmVyZlpla2VyDQoNCktvc3RlbiBFZW5zIHBlciA2LTggamFhciBlZW4gZ3JvdGUgb2ZmZXJ0

ZSBWYXN0IGJlZHJhZyBwZXIgbWFhbmQNCg0KT25kZXJob3VkIFplbGYgaW4gZGUgZ2F0ZW4gaG91

ZGVuIEphYXJsaWprc2UgaW5zcGVjdGllICsga2xlaW4gb25kZXJob3VkDQoNCkdyb3RlIGJldXJ0

IExvc3NlIG9mZmVydGUsIG1hcmt0cHJpanMgdi9kIGRhZyBFbGtlIDYtOCBqYWFyIGluYmVncmVw

ZW4NCg0KVmFzdHppdHRlbiBOZXJnZW5zIGFhbiBOZXJnZW5zIGFhbiDigJQgYWx0aWpkIG9wemVn

YmFhcg0KDQoNCg0KDQpIZXQgd2VyayB3b3JkdCBnZWRhYW4gZG9vciBlcnZhcmVuLCBzdHJlbmcg

Z2VzZWxlY3RlZXJkZSBzY2hpbGRlcnMgdWl0IHV3ICANCmVpZ2VuIHJlZ2lvIOKAlCBtZWVyIGRh

biBkdWl6ZW5kIGRvb3IgaGVlbCBOZWRlcmxhbmQuIEtsYW50ZW4gYmVvb3JkZWxlbiAgDQpWZXJm

WmVrZXIgZ2VtaWRkZWxkIG1ldCBlZW4gOSwxLg0KDQoNCg0KQmVuaWV1d2Qgd2F0IMO6dyB3b25p

bmcgcGVyIG1hYW5kIHpvdSBrb3N0ZW4/IERhdCByZWtlbnQgdSBpbiDDqcOpbiBtaW51dXQgdWl0

Lg0KRG9lIGRlIGdyYXRpcyB3b25pbmdjaGVjayDihpINCjYga29ydGUgdnJhZ2VuIMK3IHZyaWpi

bGlqdmVuZGUgcHJpanNvcGdhdmUgb3AgbWFhdCDCtyB1IGJlc2xpc3QgZGFhcm5hIHplbGYNCg0K

DQoNCg0KUFMgT29rIGFscyB1IGxpZXZlciB6ZWxmIGJsaWpmdCByZWdlbGVuLCBpcyBkZSB3b25p

bmdjaGVjayBudXR0aWc6IHUgd2VldCAgDQpkYW4gdGVubWluc3RlIHdhdCB1dyBzY2hpbGRlcndl

cmsgaMOzw7NydCB0ZSBrb3N0ZW4uDQoNCg0KDQoNClUgb250dmFuZ3QgZGV6ZSBlLW1haWwgb21k

YXQgdSB6aWNoIGhlZWZ0IGluZ2VzY2hyZXZlbiB2b29yIGFhbmJpZWRpbmdlbiAgDQp2YW4gb256

ZSBwYXJ0bmVycy4gQWZtZWxkZW4uDQoNCg0KDQoNCg==

--000000000000480627065cef865f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" style=3D"margin:0;padding:0;background-color:#eef1f4;font-family:-ap=

ple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;=

">










ing=3D"0" style=3D"max-width:600px;width:100%;background-color:#ffffff;bord=

er-radius:12px;overflow:hidden;box-shadow:0 2px 10px rgba(20,40,60,0.07);">








































































ellspacing=3D"0">










etter-spacing:0.5px;">VerfZeker
>Onderhoud buitenschilderwerk





83a;">Zelf uw schilderwerk blijven regelen,
of een vast bedrag per maand=

?




olor:#4b5b68;">Beide kan. Maar zet het eens naast elkaar =E2=80=94 het vers=

chil is groter dan u denkt.



ellspacing=3D"0" style=3D"border:1px solid #e2e8ee;border-radius:10px;overf=

low:hidden;">
















































t-size:12px;font-weight:700;color:#7c8a96;text-transform:uppercase;letter-s=

pacing:0.5px;"> 
t-size:13px;font-weight:700;color:#8a97a3;text-align:center;">Zelf regelen<=

/td>


t-size:13px;font-weight:700;color:#1f7a4d;text-align:center;">Met VerfZeker=

;font-size:13px;font-weight:600;color:#12283a;">Kosten
;font-size:13px;color:#5b6773;text-align:center;">Eens per 6-8 jaar een gro=

te offerte
;font-size:13px;color:#1f5c3a;text-align:center;background-color:#f4faf6;">=

Vast bedrag per maand

;font-size:13px;font-weight:600;color:#12283a;">Onderhoud
;font-size:13px;color:#5b6773;text-align:center;">Zelf in de gaten houden
td>


;font-size:13px;color:#1f5c3a;text-align:center;background-color:#f4faf6;">=

Jaarlijkse inspectie + klein onderhoud

;font-size:13px;font-weight:600;color:#12283a;">Grote beurt
;font-size:13px;color:#5b6773;text-align:center;">Losse offerte, marktprijs=

v/d dag
;font-size:13px;color:#1f5c3a;text-align:center;background-color:#f4faf6;">=

Elke 6-8 jaar inbegrepen

;font-size:13px;font-weight:600;color:#12283a;">Vastzitten
;font-size:13px;color:#5b6773;text-align:center;">Nergens aan
;font-size:13px;color:#1f5c3a;text-align:center;background-color:#f4faf6;">=

Nergens aan =E2=80=94 altijd opzegbaar





b68;">Het werk wordt gedaan door ervaren, streng geselecteerde schilders ui=

t uw eigen regio =E2=80=94 meer dan duizend door heel Nederland. Klanten be=

oordelen VerfZeker gemiddeld met een 9,1
strong>.


Be=

nieuwd wat =C3=BAw woning per maand zou kosten? Dat rekent u in =C3=A9=C3=

=A9n minuut uit.




" style=3D"display:inline-block;background-color:#1f7a4d;color:#ffffff;text=

-decoration:none;font-size:17px;font-weight:700;padding:16px 36px;border-ra=

dius:8px;">Doe de gratis woningcheck →

6 =

korte vragen =C2=B7 vrijblijvende prijsopgave op maat =C2=B7 u beslist daar=

na zelf



ellspacing=3D"0" style=3D"background-color:#f4f7fa;border-radius:10px;">




:1.6;color:#5b6773;">P.S. Ook als=

u liever zelf blijft regelen, is de woningcheck nuttig: u weet dan tenmins=

te wat uw schilderwerk h=C3=B3=C3=B3rt te kosten.



d5;text-align:center;">U ontvangt deze e-mail omdat u zich heeft ingeschrev=

en voor aanbiedingen van onze partners.
xyz/t/u/9844597a7663325df5a4" style=3D"color:#cfe6f4;text-decoration:underl=

ine;">Afmelden.







1" height=3D"1" alt=3D"">

--000000000000480627065cef865f--

Nigerian Medical supplies spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 06:50:00 -0600

Received: from mail-oa2-f9.google.com ([74.125.231.73]:38054)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xCzBv-00000000KHJ-2nbr

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 06:49:52 -0600

Received: by mail-oa2-f9.google.com with SMTP id 586e51a60fabf-47bb3ddaaf6so176243fac.0

for ; Sat, 03 Oct 2026 05:48:55 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1791031729; cv=none;

d=google.com; s=arc-20260327;

b=ixGdqhdDW6/J3XcaXkuogilSVM7QmOVeDer8ZVrHftyecZQ03mS1Pj+7Z3sj4Fe0Sl

dIYCeItbmxC3oj0op7NRsRczkADVr7aFGHCnEdni8AHf96dEyweKmp/1N0tURqz71HQS

6bPkP1Ab6CMHHmJo1+oxLBOGYOFNaDyAGLX6KdMQvkj5VZyP7QYTzC55Xa35LqnBPwt9

/TckQCG4ij3E5BaVvWqn4G67RS3n0yRjQHK5XXqC60BwJ8ZJGRA5QXF90ssJvSpsg09U

vLe1a9IZ86udneZcmFwjvmIT6f8RJMQr9kCj8UzfYQVHJ3CPCg2np5sgy0KXwjIi1xtm

z2Lg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=kh8aRnR99dqfp81NsXjYj4lfRPcKNsTwU4QRFbJCco8=;

fh=RTlCdw1k8A2ycv21P18bcrUtEuhcIw1X/ZNFI4umJNc=;

b=c3vNjjpJ/O60KUV91kBor8YTo/ZkL9op3yq5iLE4ZMAGn/OfCV5NewJVMyt79YHTqh

2karTbvQmP4MhUvv+2TYeCDSgM5hFolAo6S+VZPdJaFlJK9wB0mLyHL6rZepSnxSfvfn

+vsfkGBup0Qx4uAtSFogh9Gb4Vz0jWlW1ZX3Mcsb/xeXHcVDFa0qmdJxMIcW7JfajkO8

ImcMAKlLJNuwmfU1eYaDnVPWBprFXIVzJMbnmIZLiIwLIE+RGMYVzK/HUOcuaimc9kYk

u57TQ65YGVa8aD3yv7cCxzWJ1xqhqTeNxeHnQ9nd2qNtuYxLIbEQtRoLoWkdnrgwE0hR

crlQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791031729; x=1791636529; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=kh8aRnR99dqfp81NsXjYj4lfRPcKNsTwU4QRFbJCco8=;

b=WkACVjL1uZb0pjG2AkHKqQJGpdpkHur6VjznKcjZQ6Jnu9+9GwJSwzlQ5Vj/Jwsen9

Ql0hB8VWEM6k2vXxXd/yUB5OMcMWl1fwOZxNfMDq3QxWNZj0+Cnf38re8imikODQI9pK

qT9YmBgME3ZbqK/8MWnHXOWJtxexHk4lUO9XTTYQ7NKFC6xfRWL2+Nsf2xmeA+QHdiUy

JY16z6IDYq0E/R0gI6xc74RvNHyEf+1uPFqZaVZnV1wOc8rNGVGcktdmFtQ9I8ePccMj

is7ga8lb6Jc05har+vV3GvdWIJaxyXPh1romCOf17q9X4TvDMQB7FdSg7OgJIQFtewFK

/5tg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791031729; x=1791636529;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=kh8aRnR99dqfp81NsXjYj4lfRPcKNsTwU4QRFbJCco8=;

b=Cz9bts3+EFp1bCm9s0bFU1qMfS8YqfjlME4e2ndCcjd+cdpdNGEO+t5wHSpfcFh0Ls

tVlSwM5hlmA3KiCmGh7PRYqw65Ww//iZsvJaLXfQRa0ir070toh0itSBFPMwy6TGmrFq

21VBX7iqS3nauOw+F0fSMMFpcBQOs3bieHT6eyNbh3vDuZEFGWg31NWqTZgjPJgbwiB+

Rd+ObI/jc0Hi3mZp78Fa9ZENeuE2ZHnGX1eOYdbuCTU5/hX+s52OA7arYaawrcKkujDe

zLxOBYbLcaNeI/6Pl3qKZ5E9bjhWMEFqvjHXh4OzTTPsbtvTKiY/LwY5lBQxOwwC4l0o

rKvA==

X-Forwarded-Encrypted: i=1; AKwUvBzqzWF4qkaz+y3hPpn42GfrgK+HkmIpZOvWa9wtHUE4mMOognaCFzAJG4eX3EEItw322Nq+@doctor.nl2k.ab.ca

X-Gm-Message-State: AFuF++keQ+e9L0H8ssntRioylcOomCcXeGKOL/bFdOUd2DFsomP8W9Ls

bC5QQmwHWGpoyKk8oF7mmoZkeKJ+Ti2fqmKhZx3eMqxtgDkRPJMarVAkKVjRpJovLplKK7DEMbH

SUv9izFSK1OWXFnsml6+aFjd5eOOgZ7w=

X-Gm-Gg: AYBFou2YST2Ve+mzexk8y1MZ5Pwkbz3Nkwkxr/ZFVccSrD9PzXRKslkA+WnD39d4Eh8

/+09Y1XYbFm0DrRSxfF7A1l2xq2X1pTOsomSwCN6ae/Hz+KXk0j4H+wed7JEw0dZiH+yau6wyPw

3EEI6k4Kl+KQ6Yt+tIqgSd46M5ZS4NHlDyM04MSpjFWowrlVJcr+CvhTxr07WqYi1JZNRyvCHCq

Kz8kObAELGop/yGdZDowKvmhQyJKTv+DbMhRfWB1SWS280YnzjOMeEgraee7Tq3bLXaVGliOMrS

0orFSpxv7PhvSKr0h8xPSXV4d06LwcmtzOboo+nTngR+jom6WCdThxpdrydezFU84xI5WyMeHHp

ofNn4KLw6LsmqJ8eUirsAn2E7nA==

X-Received: by 2002:a05:6808:1489:b0:4e9:f6e3:1326 with SMTP id

5614622812f47-4f52ab8ba67mr6438029b6e.47.1791031729253; Sat, 03 Oct 2026

05:48:49 -0700 (PDT)

MIME-Version: 1.0

From: Derick kojo

Date: Sat, 3 Oct 2026 08:48:36 -0400

X-Gm-Features: AclHuK_6_5nEENLVwwvyutIR7ciMK0SF31NKTvB2aVbCBWphuYcNS__vv6vQJp8

Message-ID:

Subject: Inquiry for Medical Disposable Products

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000000f0b2065cef12e2"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, I hope this message finds you well. We are

currently seeking for reliable suppliers/manufacturers capable of sourcing

and supplying medical disposable products for hospital use for an upcoming

2027 healthcare infrastructure project here [...]



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.231.73 listed in dnsbl.ahbl.org]

[74.125.231.73 listed in dnsbl.ahbl.org]

[74.125.231.73 listed in dnsbl.ahbl.org]

[74.125.231.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.231.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.231.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.231.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.231.73 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.231.73 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.231.73 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sofiakosi57(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[derick.kojo.agent(at)gmail.com]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.231.73 listed in wl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Inquiry for Medical Disposable Products



--00000000000000f0b2065cef12e2

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Sir/Madam,

I hope this message finds you well.



We are currently seeking for reliable suppliers/manufacturers capable of

sourcing and supplying medical disposable products for hospital use for an

upcoming 2027 healthcare infrastructure project here in my country republic

of Ghana.



Below are some of the required items with indicative target prices:



- Disposable Syringes (5ml) =E2=80=94 $0.18/pc

- Disposable Examination Gloves =E2=80=94 $0.15/pair

- Surgical Face Masks =E2=80=94 $0.15/pc

- IV Cannula =E2=80=94 $0.38/pc

- Disposable Surgical Gowns =E2=80=94 $3.05/pc

- Disposable Bouffant Caps =E2=80=94 $0.14/pc

- Disposable Shoe Covers =E2=80=94 $0.15/pair

- Urine Collection Bags =E2=80=94 $0.55/pc

- IV Infusion Sets =E2=80=94 $0.40/pc

- Disposable Bed Sheets =E2=80=94 $1.80/pc



If you or your company can supply these items at or around the indicated

target prices, kindly reply to confirm your capability and interest to

proceed. We will then send the complete supply details, specifications,

quantities, and billing information required for preparation of your

Proforma Invoice.



We look forward to your prompt response.



Kind regards,

Mr. Derick Kojo

Procurement & Supply Agent

Address: Accra, Ghana



--00000000000000f0b2065cef12e2

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=3D"gmail_signature" data-smartmail=3D"gmail_signature">

iv style=3D"color:rgb(136,136,136)">

size:large">

t">Dear Sir/Madam,

yle=3D"font-size:small">I hope this message f=

inds you well.

rgia, serif">
We are currently seeking for reliable suppliers/manufactur=

ers capable of sourcing and supplying medical disposable products for hospi=

tal use for an upcoming 2027 healthcare infrastructure project here in my c=

ountry republic of Ghana.

Below are some of the required items wi=

th indicative target prices:

>
- Disposable Syringes (5ml) =E2=

=80=94 $0.18/pc
- Disposable Examination Gloves =E2=80=94 $0.15/pair
=

- Surgical Face Masks =E2=80=94 $0.15/pc
- IV Cannula =E2=80=94 $0.38/pc=


- Disposable Surgical Gowns =E2=80=94 $3.05/pc
- Disposable Bouffant=

Caps =E2=80=94 $0.14/pc
- Disposable Shoe Covers =E2=80=94 $0.15/pair
r>- Urine Collection Bags =E2=80=94 $0.55/pc
- IV Infusion Sets =E2=80=

=94 $0.40/pc
- Disposable Bed Sheets =E2=80=94 $1.80/pc

If you or=

your company can supply these items at or around the indicated target pric=

es, kindly reply to confirm your capability and interest to proceed. We wil=

l then send the complete supply details, specifications, quantities, and bi=

lling information required for preparation of your Proforma Invoice.

>We look forward to your prompt response.

Kind regards,
Mr. Deric=

k Kojo
Procurement & Supply Agent
Address: Accra, Ghana
iv>




--00000000000000f0b2065cef12e2--