Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Nov 2026 08:30:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNt2x-00000000Ns9-10ZQ

for dave@doctor.nl2k.ab.ca;

Mon, 02 Nov 2026 08:30:03 -0600

Resent-From: The Doctor

Resent-Date: Mon, 2 Nov 2026 08:30:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f198.google.com ([209.85.215.198]:60680)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNnef-0000000092F-2X39

for doctor@nk.ca;

Mon, 02 Nov 2026 02:44:39 -0600

Received: by mail-pg1-f198.google.com with SMTP id 41be03b00d2f7-cd65285537aso1172738a12.1

for ; Mon, 02 Nov 2026 00:43:43 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=e-tech-ac-th.20260707.gappssmtp.com; s=20260707; t=1793609017; x=1794213817; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=4jq34ZyDVHWIU6yIZV1BP1fgKHdgvfYhBX7l04klBlk=;

b=UqgXdie3mgnsMBrMbTLOx37XWHeDBLJVkN4aNukoAe8QDGxB8q90VGa4qXz2Dg/pup

ctN+I9HyMucjTnOO9XT8/l3sqTOpqBVcYwbbQ2DCjW5mCDnL9Bhx8PAUVVS1TX8iQN/D

k6z89MD/yZnqVttDuOM1UqKYo6T7I0bl0DYYR3p50P/8ugwuI/0U/NnpalARn66wFedf

vdWFrciVKdVYAWFSAWh8o3ztATaYfSK0C+apIgNzdQfZwpdgyc3eOavTtva7Ujzpd0jb

q43FW0vwqA7AvQN2a2ay+++PJLCAc2dRNJMeIHnWi6UAeJllVHKX2awwZN1tMmc2hcar

SC1w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793609017; x=1794213817;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=4jq34ZyDVHWIU6yIZV1BP1fgKHdgvfYhBX7l04klBlk=;

b=TR74uZijKeXzVoe+RuniiZLmY3Ic6IvIYQtLAnoHyfBaTy7IeU3xMzv8jnsEw1I7c0

WZSYV/VWTuXp5JMzpZNMeON/SEM+6/QpVBI59LuUms/iwyzsv8fOE9gi//GyEa0CsWHY

wd5RiUzew4pcAxpPXHpJqyjAHM6oL3uAXD/9k57GFm7YSp6tt5X0hHh6Uz/gTgTHxg4z

xBRwzmfd57rpjVWwuepadtwYiWd7Z1ft8KWXRKtW9KN0mqBvUKUslv+LPdhVFKkZqI8+

kUNNSvPBxKdduUBvE48OIsuvaXGbFF+KBGhEvBJhs08fXJMVlzGY5v2ncYZ2gOtic16I

TJFA==

X-Gm-Message-State: APuU4Z+YKr3SrThLhKMnoUgrH3q3f0CthA9FSIlcyG3mZoh0GPI8UiDh

Jf2ChypuMpG7yiTZ5Vez3gFKkvFBMHRpu9i5GLgJEVJVGqflP0CkA+mMXiamd85w+ovwGsHn6bX

qoaR9wORH+m9ri2Ovzj547QQE

MIME-Version: 1.0

X-Received: by 2002:a17:903:17c7:b0:2e5:54c6:e5c9 with SMTP id

d9443c01a7336-2eb36402557mr89983495ad.2.1793609016990; Mon, 02 Nov 2026

00:43:36 -0800 (PST)

Message-ID:

Date: Mon, 02 Nov 2026 08:43:36 +0000

Subject: Laadpaal nodig? Vergelijk offertes

From: Daan van Laadpaal Vergelijker

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000052ec7e065f4724fc"

X-Spam_score: 5.9

X-Spam_score_int: 59

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Een eigen laadpaal bespaart tot 60% op laadkosten vergeleken

met openbare laadpalen. Steeds meer gemeentes bieden subsidie op de aanschaf.

Vergelijk gratis offertes van gecertificeerde installateurs bij u in de buurt

en ontdek wat het u kost.



Content analysis details: (5.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.215.198 listed in will-spam-for-food.eu.org]

[209.85.215.198 listed in will-spam-for-food.eu.org]

[209.85.215.198 listed in will-spam-for-food.eu.org]

[209.85.215.198 listed in will-spam-for-food.eu.org]

[209.85.215.198 listed in will-spam-for-food.eu.org]

[209.85.215.198 listed in will-spam-for-food.eu.org]

[209.85.215.198 listed in will-spam-for-food.eu.org]

[209.85.215.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.198 listed in dnsbl.ahbl.org]

[209.85.215.198 listed in dnsbl.ahbl.org]

[209.85.215.198 listed in dnsbl.ahbl.org]

[209.85.215.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.198 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.198 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.198 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.198 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 OPT_OUT BODY: No description available.

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Laadpaal nodig? Vergelijk offertes



--00000000000052ec7e065f4724fc

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



RWVuIGVpZ2VuIGxhYWRwYWFsIGJlc3BhYXJ0IHRvdCA2MCUgb3AgbGFhZGtvc3RlbiB2ZXJnZWxl

a2VuIG1ldCBvcGVuYmFyZSAgDQpsYWFkcGFsZW4uIFN0ZWVkcyBtZWVyIGdlbWVlbnRlcyBiaWVk

ZW4gc3Vic2lkaWUgb3AgZGUgYWFuc2NoYWYuDQoNClZlcmdlbGlqayBncmF0aXMgb2ZmZXJ0ZXMg

dmFuIGdlY2VydGlmaWNlZXJkZSBpbnN0YWxsYXRldXJzIGJpaiB1IGluIGRlICANCmJ1dXJ0IGVu

IG9udGRlayB3YXQgaGV0IHUga29zdC4NCg0KVmVyZ2VsaWprIG9mZmVydGVzDQoNClVpdHNjaHJp

anZlbiDCtyBPcHRvdXQNCg0K

--00000000000052ec7e065f4724fc

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#1a1a1a;line-height:1.6;padding:20px;">



Een eigen laadpaal bespaart tot 60% op laadkos=

ten vergeleken met openbare laadpalen. Steeds meer gemeentes bieden subsidi=

e op de aanschaf.





Vergelijk gratis offertes van gecertificeerde =

installateurs bij u in de buurt en ontdek wat het u kost.








play:inline-block;padding:12px 32px;background:#0066cc;color:#ffffff;text-d=

ecoration:none;font-size:15px;font-weight:bold;border-radius:4px;">Vergelij=

k offertes







t#t/u/5e206b725b52c0095c88" style=3D"color:#999;">Uitschrijven
=C2=B7 <=

a href=3D"https://watchviineemy.net#t/p/5e206b725b52c0095c88" style=3D"colo=

r:#999;">Optout






height=3D"1" alt=3D"">



--00000000000052ec7e065f4724fc--

Followup spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Nov 2026 08:29:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNt2p-00000000NqW-2KV3

for dave@doctor.nl2k.ab.ca;

Mon, 02 Nov 2026 08:29:55 -0600

Resent-From: The Doctor

Resent-Date: Mon, 2 Nov 2026 08:29:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta-sp-e01.commufa.jp ([106.153.250.11]:56609)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNnOr-000000007g7-3o7d

for sales@nk.ca;

Mon, 02 Nov 2026 02:28:24 -0600

Received: from mta-snd-e01.commufa.jp by mta-sp-e01.commufa.jp with ESMTP

id <20261102082728215.SUDO.73459.mta-snd-e01.commufa.jp@commufa.jp>

for ; Mon, 2 Nov 2026 17:27:28 +0900

Received: from yk.commufa.jp by mta-snd-e01.commufa.jp with ESMTP

id <20261102082727844.VJOX.67852.yk.commufa.jp@commufa.jp>

for ; Mon, 2 Nov 2026 17:27:27 +0900

Reply-To: eaglespatrick5@gmail.com

From: Dr Patrick Eagles

To: sales@nk.ca

Subject: Good Day

Date: 02 Nov 2026 03:27:27 -0500

Message-ID: <20261102011045.22CD65A158BCB3C9@yk.commufa.jp>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Authentication-Info: afyj3dqj

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yk.commufa.jp; s=default-1th84yt82rvi; t=1793608048;

bh=5DVkiuMUY9PV+9/pdhKagfN6JFNPRQS7jLkSHvpmpQw=;

h=Reply-To:From:To:Subject:Date;

b=icv2DLgsnkWLe0/taL9xhFpMPTCvylW0GA8ITlJfGuQqLEB24xiOZGonUH04bioqDX0ye6q4

bsSRBYBOd14TR8df7gNm4ZJaHD/tbA/jQ1jCMqe/RM/bk3mshLXl4ZIC/fsltFUBsrnIDHvARA

5cf4+M7xerMUGpUL1Lx1nh4/6FVHZAV9/0iO6LIn8HeOiS8hhgXUgkgv6Dx2y2sx0qAuSijyF8

34XqRQbtJsonS97OdNsYEGuP5Ot1+3iTfmo0y1HzLtHQdqoquv7qeqAaunUz1YjCiAzfNxskjd

iRjEKULB0vksqCXZ7BurEG3Cu8OzBa7XlzBTwkyMCYR2R/Kw==

X-Spam_score: 11.8

X-Spam_score_int: 118

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good Afternoon , I hope you received my previous message?

Dr. Patrick Eagles



Content analysis details: (11.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[106.153.250.11 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[106.153.250.11 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

2.1 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)

[106.153.250.11 listed in bl.mailspike.net]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[106.153.250.11 listed in psbl.surriel.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[106.153.250.11 listed in dnsbl.ahbl.org]

[106.153.250.11 listed in dnsbl.ahbl.org]

[106.153.250.11 listed in dnsbl.ahbl.org]

[106.153.250.11 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[106.153.250.11 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[106.153.250.11 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[106.153.250.11 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[106.153.250.11 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[eaglespatrick5(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_HK_NAME_DR No description available.

Subject: {SPAM?} Good Day













Good Afternoon , I hop=

e you received my previous message?
Dr. Patrick Eagles


tml>

Followup spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Nov 2026 02:29:00 -0600

Received: from mta-sp-e01.commufa.jp ([106.153.250.11]:62817)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNnOs-000000007fS-09ik

for dave@doctor.nl2k.ab.ca;

Mon, 02 Nov 2026 02:28:21 -0600

Received: from mta-snd-e01.commufa.jp by mta-sp-e01.commufa.jp with ESMTP

id <20261102082720166.SUDH.73459.mta-snd-e01.commufa.jp@commufa.jp>

for ; Mon, 2 Nov 2026 17:27:20 +0900

Received: from yk.commufa.jp by mta-snd-e01.commufa.jp with ESMTP

id <20261102082719807.VJOH.67852.yk.commufa.jp@commufa.jp>

for ; Mon, 2 Nov 2026 17:27:19 +0900

Reply-To: eaglespatrick5@gmail.com

From: Dr Patrick Eagles

To: dave@doctor.nl2k.ab.ca

Subject: Good Day

Date: 02 Nov 2026 03:27:19 -0500

Message-ID: <20261102011045.164C6DD993F85BE8@yk.commufa.jp>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Authentication-Info: afyj3dqj

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yk.commufa.jp; s=default-1th84yt82rvi; t=1793608040;

bh=5DVkiuMUY9PV+9/pdhKagfN6JFNPRQS7jLkSHvpmpQw=;

h=Reply-To:From:To:Subject:Date;

b=M6THyVgXIRDs6nG3ga3f4LhHRZPwA5ULX/0trWLaWLDgWAK/BJgRoojHnt+qQtJ6LjO+LmOc

yJ+6mlM5k7mAeoMvLpqWVtyCUuWbTmoScxczUl01Osjv+YN+Dvl8mO3r8S1o6RBHuEGs3lH+SJ

ziqdj1JuStchiM/t2W3yXY1MrXG6dT6WkSPZ8pLLbBU4yR3M64RvSWlftvYnV89Umy+Pgj/Qcg

9A59syKkjs5TpJe7BBt4VfoK0/C089hMTMzABqG1LbV5MIdaSbTkGflfS3c65ptwlPcq/RFR2h

3ujG8MC2Xtc+usfJ24aCCJNbsqjoPHY3YHm0QRLdfV9md5Ow==

X-Spam_score: 11.8

X-Spam_score_int: 118

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good Afternoon , I hope you received my previous message?

Dr. Patrick Eagles



Content analysis details: (11.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

[106.153.250.11 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[106.153.250.11 listed in dnsbl.ahbl.org]

[106.153.250.11 listed in dnsbl.ahbl.org]

[106.153.250.11 listed in dnsbl.ahbl.org]

[106.153.250.11 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[106.153.250.11 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[106.153.250.11 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[106.153.250.11 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[106.153.250.11 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[106.153.250.11 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[106.153.250.11 listed in psbl.surriel.com]

2.1 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)

[106.153.250.11 listed in bl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[106.153.250.11 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[eaglespatrick5(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_HK_NAME_DR No description available.

Subject: {SPAM?} Good Day













Good Afternoon , I hop=

e you received my previous message?
Dr. Patrick Eagles


tml>

Follow up spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Nov 2026 08:29:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNt2l-00000000Nq6-1bb1

for dave@doctor.nl2k.ab.ca;

Mon, 02 Nov 2026 08:29:51 -0600

Resent-From: The Doctor

Resent-Date: Mon, 2 Nov 2026 08:29:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta-sp-e02.commufa.jp ([106.153.250.12]:24512)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNnOs-000000007fU-0Chu

for doctor@doctor.nl2k.ab.ca;

Mon, 02 Nov 2026 02:28:20 -0600

Received: from mta-snd-e02.commufa.jp by mta-sp-e02.commufa.jp with ESMTP

id <20261102082720006.YVAP.75330.mta-snd-e02.commufa.jp@commufa.jp>

for ; Mon, 2 Nov 2026 17:27:20 +0900

Received: from yk.commufa.jp by mta-snd-e02.commufa.jp with ESMTP

id <20261102082719631.FALN.50533.yk.commufa.jp@commufa.jp>

for ; Mon, 2 Nov 2026 17:27:19 +0900

Reply-To: eaglespatrick5@gmail.com

From: Dr Patrick Eagles

To: doctor@doctor.nl2k.ab.ca

Subject: Good Day

Date: 02 Nov 2026 03:27:19 -0500

Message-ID: <20261102011045.B4463EE34096AA11@yk.commufa.jp>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Authentication-Info: afyj3dqj

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yk.commufa.jp; s=default-1th84yt82rvi; t=1793608040;

bh=5DVkiuMUY9PV+9/pdhKagfN6JFNPRQS7jLkSHvpmpQw=;

h=Reply-To:From:To:Subject:Date;

b=g7IceJeQ2mOpuPdFHMwKU54alMwPnRMv2fEzFRe+e6FNHowWaBl927yw9uDF8ECjUb8o4muv

SVIRxkfZ5rVk2KYQx385tD7nNZz23zaB1VsCYfqW++Al5l+MAqvjMPnbowx74D95GC9Lxfmw1s

Ao/1yvR5U0a+t0qssQVGniVJ2Gqpt6z6D2N04DoQUZCR/rs99O6NxF21YVAataQiJf15K5RE0s

hngMW8n0jiyKv+wUXD3Iatv7T8Yrqrl6XywfPLTttH5U9f7b1t1u7gUrUqWCHsC5XthjFCQCB5

jKOYT3sob5M/DjpyyczV/DSBe1vx9gZYyQwkP4+6qkOmfXpg==

X-Spam_score: 10.2

X-Spam_score_int: 102

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good Afternoon , I hope you received my previous message?

Dr. Patrick Eagles



Content analysis details: (10.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[106.153.250.12 listed in will-spam-for-food.eu.org]

[106.153.250.12 listed in will-spam-for-food.eu.org]

[106.153.250.12 listed in will-spam-for-food.eu.org]

[106.153.250.12 listed in will-spam-for-food.eu.org]

[106.153.250.12 listed in will-spam-for-food.eu.org]

[106.153.250.12 listed in will-spam-for-food.eu.org]

[106.153.250.12 listed in will-spam-for-food.eu.org]

[106.153.250.12 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[106.153.250.12 listed in dnsbl.ahbl.org]

[106.153.250.12 listed in dnsbl.ahbl.org]

[106.153.250.12 listed in dnsbl.ahbl.org]

[106.153.250.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[106.153.250.12 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[106.153.250.12 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[106.153.250.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[106.153.250.12 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[106.153.250.12 listed in psbl.surriel.com]

2.1 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)

[106.153.250.12 listed in bl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[106.153.250.12 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[eaglespatrick5(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_HK_NAME_DR No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Good Day













Good Afternoon , I hop=

e you received my previous message?
Dr. Patrick Eagles


tml>

Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Nov 2026 08:27:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNt0a-00000000Ndr-2SEs

for dave@doctor.nl2k.ab.ca;

Mon, 02 Nov 2026 08:27:36 -0600

Resent-From: The Doctor

Resent-Date: Mon, 2 Nov 2026 08:27:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-145.dm.aliyun.com ([140.205.208.145]:41316)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNnGG-000000006wD-0TyF

for root@nk.ca;

Mon, 02 Nov 2026 02:19:27 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:carrie@vip.rubbersheeting.ltd:alibabak_WebBatch:317014

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.rubbersheeting.ltd; s=aliyun-cn-hangzhou;

t=1793607500; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=MxPkyimI4bOuJoRDOybxGdtbxhJb4oRbuE3t85WFCo8=;

b=IvxDz5Prw/hkEWpoetZtKoxCT45DbAzI94tE3qYk82LGeoXlXY10jw4yH5aeShUpEhONhtTrn9zV8JFcEli95XPf8KVTadct1YiyGDkSk6Ko+gexuaiDZ6MBjCGZm02UkM/Y77ExL2mLUYtGH0uFbDEOGtJjzm+f4YQ/CD5uoIM=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1793607500; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=MxPkyimI4bOuJoRDOybxGdtbxhJb4oRbuE3t85WFCo8=;

b=pfCcjOQzfOsiaGraWhZVZmgorhqfCKj4pGsxgFox8M7RjgiVCS9dofevrrkw2rWw7ZuwJGTNz72FoUMdF7pBWHOSPlYV2+IKjROdDQX8xHlgaOS4n/sd5zVfJNsAfd22wE/VN1AAif81k8NVSlxaWen6ncXeGIelggmskRUe5vw=

Received: from chitu-hsf(mailfrom:carrie@vip.rubbersheeting.ltd fp:ma_600000367761096226 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Mon, 02 Nov 2026 16:17:15 +0800

Date: Mon, 02 Nov 2026 16:17:15 +0800

From: "Carrie Kang"

To:

Reply-To:

Message-ID:

Subject: =?UTF-8?B?UnViYmVyIG1hdHM=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000367761096227

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Wish you have a great day!



Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.145 listed in will-spam-for-food.eu.org]

[140.205.208.145 listed in will-spam-for-food.eu.org]

[140.205.208.145 listed in will-spam-for-food.eu.org]

[140.205.208.145 listed in will-spam-for-food.eu.org]

[140.205.208.145 listed in will-spam-for-food.eu.org]

[140.205.208.145 listed in will-spam-for-food.eu.org]

[140.205.208.145 listed in will-spam-for-food.eu.org]

[140.205.208.145 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.145 listed in dnsbl.ahbl.org]

[140.205.208.145 listed in dnsbl.ahbl.org]

[140.205.208.145 listed in dnsbl.ahbl.org]

[140.205.208.145 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.145 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.145 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.145 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.145 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.145 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.145 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[140.205.208.145 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?UnViYmVyIG1hdHM=?=



Hi,=

Wish you have a great day!
pan>



an style=3D"text-wrap-mode: nowrap;font-family:comic sans ms">We specialize in=

the manufacturing of Rubb=

er products and PTFE
, 


ic sans ms">Primarily focusing on
an>SBR/CR(Neoprene)/EPDM/NBR(Nitrile)/NR(Natural=

)/Insertion/FKM(Viton)/Insulating/(ESD) rubber sheet/High-abrasion rubber/Sili=

cone.

=

Anti-Static/Anti-Slip=

ped Rubber sheets/Stall mats/Drainage rubber mats/Rubber Block.

<=

span style=3D"font-family:comic sans ms;">
(255, 255, 0);">Custom-sized gaskets and precision cutting are available
>.



wrap;font-family:comic sans ms">If you are interested or have any requirements=

, please do not hesitate to contact me. 


-wrap-mode: nowrap;font-family:comic sans ms">Your feedback is highly valued.<=

/span>


li.net/2025/05/13/fG4YD6w3soeJ1Tv.jpg"/>


-mode: nowrap;">


family:comic sans ms">Thanks &Best Regards


t-family:comic sans ms">


ap;font-family:comic sans ms">Carrie Kang


p-mode: nowrap;font-family:comic sans ms">Whatsapp&Phone:0086 13821173226<=

/span>

=

www.zxzrubberfactory.com



Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Nov 2026 08:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNt2U-00000000NoZ-0bpb

for dave@doctor.nl2k.ab.ca;

Mon, 02 Nov 2026 08:29:34 -0600

Resent-From: The Doctor

Resent-Date: Mon, 2 Nov 2026 08:29:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f197.google.com ([209.85.214.197]:51512)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNmhy-000000003Re-1AI2

for doctor@nk.ca;

Mon, 02 Nov 2026 01:43:59 -0600

Received: by mail-pl1-f197.google.com with SMTP id d9443c01a7336-2e95f8543c9so27604965ad.3

for ; Sun, 01 Nov 2026 23:43:03 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ohie.edu.eg; s=google; t=1793605377; x=1794210177; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=QVck3dKnmLgMgkHIT09ofYj0RvhBavI3ryvt4X6i18g=;

b=ZHSHhQkSNgewkIUWlABNPtIm/zNZmYJVMBN8JLpZQHOu2gpSNpMrT1AiOJyniBs4u3

etG6ImeLK3mLp/rHiAMVKF8OFL6mK0OXf2VkafXfoqUqcBBnITrMPVXAmCqZOqRhqMWe

2wf16ishwmwnxL7qYclkRGjPt9n4Wp3agZVGy3T33InGaW0BCeoq5+B+TKK7lOOYSJ0w

kouUbhXB0bRi5YJNWD5NydiRl/JIcOfCxwA9UNc2Rf9Ls0WIrmd9whtQSuXxQA7g8xUk

81/ncoaGTcKslaq1yTn1x5B8Tvl3amxUsr0TNFiNT4d1zbKI8OMgw4h6ggY7RX557N9p

Zshg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793605377; x=1794210177;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=QVck3dKnmLgMgkHIT09ofYj0RvhBavI3ryvt4X6i18g=;

b=xnLkxFWa8FaDYJ0jOWordHOFnJrTWLvH3NGvTuiXsCevAEGr2DB5I6z1uBeu5M6LAG

K/NlOiWwn2CNyyQE1dLmG4H53HOwXnIHVLJdRs3QqSVE6Ql+8rUjW2rzMIedlnqE5zlT

h5TFzBPXOz8o7vNpmIZiLLpIcZO3CKDxRGZpPtTa8WTHVnu9zRc5odruhcT/tz0h7f+j

+BxpGgNkrWVxoTcD/chcBnXSch4mJcWrTIWWqIO3kQbpwzk5NR5Ct5MHtX0oB7hInFm3

+8SaMN3AcgxHRhXdSuHJJXmAnfE83y1kS/txGR+Bg6o/mOQwfZg8Ih5qcL40pcMx/X6E

iTog==

X-Gm-Message-State: APuU4Z/du4/Knw0ZLKiFlqO7uB44+eVmH60QskG0H1fKGZiqdL6ne3Lr

7Au+rQQ0+utOwAMWCpje0xbcv40gWqp2QAnm9xs2TPNQG/uq/nbNZHSwai4DtGgyzAloa7PQjHS

sJ9DC3rBtrxvn5MkcDq94Z6jR

MIME-Version: 1.0

X-Received: by 2002:a17:902:e542:b0:2e9:8e0a:cc4d with SMTP id

d9443c01a7336-2eb364e9c5dmr84325545ad.41.1793605377196; Sun, 01 Nov 2026

23:42:57 -0800 (PST)

Message-ID:

Date: Mon, 02 Nov 2026 07:42:57 +0000

Subject: Slecht geisoleerd? Dit kunt u doen

From: Noor van Isolatie Wijzer

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000006016fa065f464bcb"

X-Spam_score: 5.9

X-Spam_score_int: 59

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Slechte isolatie kost u honderden euro's per jaar aan warmteverlies.

Veel woningen hebben recht op subsidie voor vloer-, dak- of spouwmuurisolatie.

Ontdek welke isolatie het meeste oplevert voor uw woning en of u in aanmerking

komt voor vergoeding.



Content analysis details: (5.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.197 listed in will-spam-for-food.eu.org]

[209.85.214.197 listed in will-spam-for-food.eu.org]

[209.85.214.197 listed in will-spam-for-food.eu.org]

[209.85.214.197 listed in will-spam-for-food.eu.org]

[209.85.214.197 listed in will-spam-for-food.eu.org]

[209.85.214.197 listed in will-spam-for-food.eu.org]

[209.85.214.197 listed in will-spam-for-food.eu.org]

[209.85.214.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.197 listed in dnsbl.ahbl.org]

[209.85.214.197 listed in dnsbl.ahbl.org]

[209.85.214.197 listed in dnsbl.ahbl.org]

[209.85.214.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.197 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 OPT_OUT BODY: No description available.

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.197 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.197 listed in list.dnswl.org]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.197 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Slecht geisoleerd? Dit kunt u doen



--0000000000006016fa065f464bcb

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



U2xlY2h0ZSBpc29sYXRpZSBrb3N0IHUgaG9uZGVyZGVuIGV1cm8ncyBwZXIgamFhciBhYW4gd2Fy

bXRldmVybGllcy4gVmVlbCAgDQp3b25pbmdlbiBoZWJiZW4gcmVjaHQgb3Agc3Vic2lkaWUgdm9v

ciB2bG9lci0sIGRhay0gb2Ygc3BvdXdtdXVyaXNvbGF0aWUuDQoNCk9udGRlayB3ZWxrZSBpc29s

YXRpZSBoZXQgbWVlc3RlIG9wbGV2ZXJ0IHZvb3IgdXcgd29uaW5nIGVuIG9mIHUgaW4gIA0KYWFu

bWVya2luZyBrb210IHZvb3IgdmVyZ29lZGluZy4NCg0KRG9lIGRlIGlzb2xhdGllY2hlY2sNCg0K

VWl0c2NocmlqdmVuIMK3IE9wdG91dA0KDQo=

--0000000000006016fa065f464bcb

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#1a1a1a;line-height:1.6;padding:20px;">



Slechte isolatie kost u honderden euro's per j=

aar aan warmteverlies. Veel woningen hebben recht op subsidie voor vloer-, =

dak- of spouwmuurisolatie.





Ontdek welke isolatie het meeste oplevert voor=

uw woning en of u in aanmerking komt voor vergoeding.








y:inline-block;padding:12px 32px;background:#4a7c59;color:#ffffff;text-deco=

ration:none;font-size:15px;font-weight:bold;border-radius:4px;">Doe de isol=

atiecheck







/u/bfcfb4d4f83ed1d8aa9d" style=3D"color:#999;">Uitschrijven
=C2=B7
ref=3D"https://masaralman.com#t/p/bfcfb4d4f83ed1d8aa9d" style=3D"color:#999=

;">Optout






ight=3D"1" alt=3D"">



--0000000000006016fa065f464bcb--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Nov 2026 08:29:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNt2G-00000000NnF-3Fim

for dave@doctor.nl2k.ab.ca;

Mon, 02 Nov 2026 08:29:20 -0600

Resent-From: The Doctor

Resent-Date: Mon, 2 Nov 2026 08:29:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f72.google.com ([209.85.219.72]:52659)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <3UjroagoWBsU2t3st4HHKE2z4l2905mwtn3nszzw.z2rozn4z2yv.nl@maestro.bounces.google.com>)

id 1xNmVP-000000002Cj-0rie

for doctor@nk.ca;

Mon, 02 Nov 2026 01:31:00 -0600

Received: by mail-qv1-f72.google.com with SMTP id 6a1803df08f44-91c7886e8dfso59803146d6.1

for ; Sun, 01 Nov 2026 23:30:05 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=rotarypublicschool.org; s=google; t=1793604599; x=1794209399; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=4kvjZvw+jV0Ku1hBGL/J+iD9JpF9a4fItBsKoVY2MRU=;

b=tLdGeh8d6pCs5kOkJ696qIeYt0jG7pdBhm9dHLbMqpVjMm/hArgeTMS/XuxR01OF4V

CRnCFNjssRHmK6K+cLFyPq7pFLicybomQVcp70gIxHSVnMXuMQmR+58zKhjOdRD2+8nP

PaX472Z7CZLLB3tlgHK9um4HViX46riEql26S+yv4p1s9FHxpiJtibaHQdBchjaHf26h

BdgGxPqaTCQAxKlT+8bTfDX3ZiZAT8D2bvQl3JezvoHse76sc8DvonKBvzr8cpBpq7ro

Ef3PUS+dm4zGOm5/7zYW53jSXi19r5KLSJvpM/bmmrkd/HzlujIBPSO6ZEW7jpRI01T6

Xl6w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793604599; x=1794209399;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=4kvjZvw+jV0Ku1hBGL/J+iD9JpF9a4fItBsKoVY2MRU=;

b=VRUu/iQImulHlwoy9Dn1p15LPw6Uy5qZKp1I682jgjIPUJ2liNyZloOCnkkF+TeGQG

EfSrpzJ6kq1oslg2zQkqNwhLc8TmDq5LAqxzliorbBKuB6gv/SX/nwM/xxTqgTVTWT9q

UZajHGQAcvUehmbLigZ3StfrldDrPlamxqa5Xck/0ZrlC55c93bm2+eou6hlgtGO7eIZ

iqsDeV6JitiIESMx/HQImbsf+agusp7O7pBaQLdLVLQL7pu9nbNd8oNDctk4T/8zvnok

I4ITnu9vPtD5FfdmrD3V/j8b4Q0XmyGbqb/Rr3kRgg/DdY6lodirQCLdLNCw2oBH7r3D

0sUA==

X-Gm-Message-State: AFq9FYKhr5O+aaRhJFb0KYx1+GPcHFZE7MDSy6eNXr5Qi32HWv5OK957

hWx0trwlLf6mNVwcDEWfS+NMair04zximSj+942f8KY96OWKYljXdKM0vw3Kdv2EN8xeNS7NvJJ

tUgTBXpgFO2PEnGcWBSLzL8kR

MIME-Version: 1.0

X-Received: by 2002:a05:690e:1309:b0:679:9e25:2f9 with SMTP id

956f58d0204a3-67ba5041e66mr7169561d50.66.1793604178226; Sun, 01 Nov 2026

23:22:58 -0800 (PST)

Message-ID:

Date: Mon, 02 Nov 2026 07:22:58 +0000

Subject: Zonnepanelen nog nooit zo voordelig

From: Tim van Zonnepanelen Advies

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000e9406e065f460355"

X-Spam_score: 5.9

X-Spam_score_int: 59

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: De prijs van zonnepanelen is flink gedaald en de terugverdientijd

is korter dan ooit. Veel huiseigenaren verdienen hun investering binnen 5

jaar terug. Vraag een vrijblijvende offerte aan en ontdek hoeveel u kunt

besparen op basis van uw dak en verbruik.



Content analysis details: (5.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.72 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_JB BODY: Odd Letter Triples with JB

0.1 TW_UG BODY: Odd Letter Triples with UG

1.0 OPT_OUT BODY: No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.72 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.72 listed in bl.score.senderscore.com]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Zonnepanelen nog nooit zo voordelig



--000000000000e9406e065f460355

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



RGUgcHJpanMgdmFuIHpvbm5lcGFuZWxlbiBpcyBmbGluayBnZWRhYWxkIGVuIGRlIHRlcnVndmVy

ZGllbnRpamQgaXMga29ydGVyICANCmRhbiBvb2l0LiBWZWVsIGh1aXNlaWdlbmFyZW4gdmVyZGll

bmVuIGh1biBpbnZlc3RlcmluZyBiaW5uZW4gNSBqYWFyIHRlcnVnLg0KDQpWcmFhZyBlZW4gdnJp

amJsaWp2ZW5kZSBvZmZlcnRlIGFhbiBlbiBvbnRkZWsgaG9ldmVlbCB1IGt1bnQgYmVzcGFyZW4g

b3AgIA0KYmFzaXMgdmFuIHV3IGRhayBlbiB2ZXJicnVpay4NCg0KVnJhYWcgb2ZmZXJ0ZSBhYW4N

Cg0KVWl0c2NocmlqdmVuIMK3IE9wdG91dA0KDQo=

--000000000000e9406e065f460355

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#1a1a1a;line-height:1.6;padding:20px;">



De prijs van zonnepanelen is flink gedaald en =

de terugverdientijd is korter dan ooit. Veel huiseigenaren verdienen hun in=

vestering binnen 5 jaar terug.





Vraag een vrijblijvende offerte aan en ontdek =

hoeveel u kunt besparen op basis van uw dak en verbruik.








display:inline-block;padding:12px 32px;background:#f5a623;color:#ffffff;tex=

t-decoration:none;font-size:15px;font-weight:bold;border-radius:4px;">Vraag=

offerte aan







.com#t/u/1e3b8531b60b0a64c7ae" style=3D"color:#999;">Uitschrijven
=C2=

=B7
=3D"color:#999;">Optout






"1" height=3D"1" alt=3D"">



--000000000000e9406e065f460355--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Nov 2026 08:29:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNt26-00000000Nm5-0EXI

for dave@doctor.nl2k.ab.ca;

Mon, 02 Nov 2026 08:29:10 -0600

Resent-From: The Doctor

Resent-Date: Mon, 2 Nov 2026 08:29:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f200.google.com ([209.85.167.200]:52570)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNmAx-00000000Pub-14sd

for doctor@nk.ca;

Mon, 02 Nov 2026 01:09:52 -0600

Received: by mail-oi1-f200.google.com with SMTP id 5614622812f47-5640a2d9708so3761519b6e.1

for ; Sun, 01 Nov 2026 23:08:58 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sip.cl; s=google; t=1793603332; x=1794208132; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=uSMgi4AMna4GK1lmQ68W/KHKwNvyukIP+K451ZPXrbw=;

b=porufmMbA7QXrgVLIKXDxA7FVaENj1s8v+PWPSWeDwU666tF1esxCft2y7SbIngDj4

Vx9XEVZYwUir7dqKo1EeqonlDgH/ZmpP/dhERGUgnY5304bbsdmlSognRFPM+G/axlYV

o8x0MAXMdr7qqN7UdffB2DozYCG2vRWZKHrHc=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793603332; x=1794208132;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=uSMgi4AMna4GK1lmQ68W/KHKwNvyukIP+K451ZPXrbw=;

b=JscTPCdNlRHOoUeJC817F7G8Ba7kVyFnzbglCVFxIWq9AHxj0ObaE7YNKdJEgxKQq1

/euYoBsq3xPKe8DenEkjss4AoPHagl+av7wb3dgchh8kCRk1C1UKE0FbMsXgtwE0oLMV

RvAIZa7SsMiZTPMUtgT4DOqAI0O/8J3Zd+w8xBQCr3TgFFJqroS69tPnByxYIZUjotqB

YUICwaPCqENoljKygI4+6ElkQ0fSQ/Hthszy6iK7qT/gxFmZ0bozk5NHpF0hs/wDEIDD

Xf9pwUPm7y+B6V1LSzqpcezrsxLYoEONhhGk5zIWx2ACNVJdGw1rp0dRtcC7AOQ2Zm6R

RGnQ==

X-Gm-Message-State: AFq9FYKiGEBfEktc8YzOqeem2Nd4HhClOr7oEwcl1NCovkovU+SoeHuF

X09QH72gZqXjvVSLZzWYi34aG1sTKJh0Dl8W6nZ8h+pbh+jzXuk9PwQYW6a8YGgE0Ue9cI9vm4v

zeCh/1CiQ/fnfBXZ7w2X2HDT6xgEAhu1Hu2oyMYcY0O2A+FJQY1hqrD5xCWTnHWJGUBOQ6UjH8R

s2Rz4WBKiJFdSx13m7FgCU2zttBs0zY+nlgMiCBoxj2yY09RlNkB7XKFekroyhVw==

MIME-Version: 1.0

X-Received: by 2002:a05:690e:14ca:b0:679:8e90:9012 with SMTP id

956f58d0204a3-67ba50f31e4mr6405350d50.101.1793602960892; Sun, 01 Nov 2026

23:02:40 -0800 (PST)

Message-ID:

Date: Mon, 02 Nov 2026 07:02:40 +0000

Subject: Thuisbatterij: wat levert het op?

From: Lars van Thuisbatterij Info

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000005a36ac065f45bb0d"

X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Steeds meer huiseigenaren slaan hun zonnestroom op in een

thuisbatterij. Zo gebruikt u uw eigen energie ook 's avonds en bij bewolkt

weer. Vraag vrijblijvend informatie aan en ontdek wat een thuisbatterij u

oplevert op basis van uw verbruik en panelen.



Content analysis details: (5.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.200 listed in dnsbl.ahbl.org]

[209.85.167.200 listed in dnsbl.ahbl.org]

[209.85.167.200 listed in dnsbl.ahbl.org]

[209.85.167.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.200 listed in dnsbl.ahbl.org]

0.1 TW_JB BODY: Odd Letter Triples with JB

1.0 OPT_OUT BODY: No description available.

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.200 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.200 listed in bl.score.senderscore.com]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Thuisbatterij: wat levert het op?



--0000000000005a36ac065f45bb0d

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



U3RlZWRzIG1lZXIgaHVpc2VpZ2VuYXJlbiBzbGFhbiBodW4gem9ubmVzdHJvb20gb3AgaW4gZWVu

IHRodWlzYmF0dGVyaWouIFpvICANCmdlYnJ1aWt0IHUgdXcgZWlnZW4gZW5lcmdpZSBvb2sgJ3Mg

YXZvbmRzIGVuIGJpaiBiZXdvbGt0IHdlZXIuDQoNClZyYWFnIHZyaWpibGlqdmVuZCBpbmZvcm1h

dGllIGFhbiBlbiBvbnRkZWsgd2F0IGVlbiB0aHVpc2JhdHRlcmlqIHUgIA0Kb3BsZXZlcnQgb3Ag

YmFzaXMgdmFuIHV3IHZlcmJydWlrIGVuIHBhbmVsZW4uDQoNClZyYWFnIGluZm9ybWF0aWUgYWFu

DQoNClVpdHNjaHJpanZlbiDCtyBPcHRvdXQNCg0K

--0000000000005a36ac065f45bb0d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#1a1a1a;line-height:1.6;padding:20px;">



Steeds meer huiseigenaren slaan hun zonnestroo=

m op in een thuisbatterij. Zo gebruikt u uw eigen energie ook 's avonds en =

bij bewolkt weer.





Vraag vrijblijvend informatie aan en ontdek wa=

t een thuisbatterij u oplevert op basis van uw verbruik en panelen.








ay:inline-block;padding:12px 32px;background:#2c5f2d;color:#ffffff;text-dec=

oration:none;font-size:15px;font-weight:bold;border-radius:4px;">Vraag info=

rmatie aan







t/u/83e0046527f00cd12035" style=3D"color:#999;">Uitschrijven
=C2=B7
href=3D"https://horolluxxmy.net#t/p/83e0046527f00cd12035" style=3D"color:#9=

99;">Optout






eight=3D"1" alt=3D"">



--0000000000005a36ac065f45bb0d--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Nov 2026 08:29:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNt1z-00000000Nla-3RmN

for dave@doctor.nl2k.ab.ca;

Mon, 02 Nov 2026 08:29:03 -0600

Resent-From: The Doctor

Resent-Date: Mon, 2 Nov 2026 08:29:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f200.google.com ([209.85.128.200]:61519)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNllb-00000000NAC-0vNj

for doctor@nk.ca;

Mon, 02 Nov 2026 00:43:40 -0600

Received: by mail-yw1-f200.google.com with SMTP id 00721157ae682-8ab3dc2a7adso46191417b3.2

for ; Sun, 01 Nov 2026 22:42:45 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=students.unnes.ac.id; s=google; t=1793601759; x=1794206559; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=YESpg1rcZwIZJB8g/oyOuuS6v1GLDqsQrJ8qKel7oAk=;

b=kyStSTmRFz2pnl/D5iDoqY8srXjk6yjfVu1/6oiWFUtz3m6mC2g2W1uqgZeQtWPqAp

fDl0OKMntXz/MlIYKejwrmtZaiBaKimlDZLHc1FDntGjzQOjm2UG+wYUJbrN+7gpHZfs

8fdv9RrWyPrdi2ua4rIubySlZ7/BQg5eMxPldGNm2NLaCFh37k0g4J3MwbJJYMmGT+Zp

iVFiikNf89CUZUW7VZtw0YC5qHnxsntNJ4COun5IKdWswOYzZx8eOmphUkDniTwzsPCe

kJXD90UkMwbjpB9m+m0iqfm/XX30xucFbApkdCe52fZrJ71OaERkoI6WBAyuWyc21j+B

RQ0Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793601759; x=1794206559;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=YESpg1rcZwIZJB8g/oyOuuS6v1GLDqsQrJ8qKel7oAk=;

b=anN3R1Nq2ViwR+C4z6SI04oki5hsuTFNRnk/rrQtiUKuDYJhnBszrF3jjNpZnC3vyq

Htfjug+zomaTX0hD7sxRkWVTOt6dyTNOsylABOUr5y+PnTw/lJJYa3Q5KO+5zOMdiWQT

xVBaR7QtfG1fJMvhvpF6/RNrjWtQhWAwNdRR3omY593yShWFSJVSirasg7Lh0YqUUl1f

K/5nxLybaUBl3a3ER7+FXykAdomLclj9GTcW6IQcbF67BSZ8YkYZQIju9rfJ5UsUWOYK

QyPXn9KgprOWr9TuLsHLrrbZbe0S80ok+URfwkI6rzfnmrqzvarWyvnncrVavChFwXOE

JUhw==

X-Gm-Message-State: APuU4Z//FWdWKNtizsiSnqnF//EMSwPhOswjU4rRtfZVgUtvYB/MHch/

NJ7fFMJnDJ48VWCQQIRd6fauv90ihg1ydEL+byVJt+oyZLLWEr8wqx8IoPJ9X0gQnNNUPlG8GoJ

KpviIdvDRWGm259JSZ42KE9agIMFcWwOfW98TYgICIDkcdixHtL8zCqOD2aytYtpFo5Kxfps=

MIME-Version: 1.0

X-Received: by 2002:a05:690c:6e81:b0:87e:2404:45fc with SMTP id

00721157ae682-8b2b673ee93mr51467747b3.53.1793601759212; Sun, 01 Nov 2026

22:42:39 -0800 (PST)

Message-ID:

Date: Mon, 02 Nov 2026 06:42:39 +0000

Subject: Wat kunt u besparen op energie?

From: Sophie van Besparingsmeter

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000ba04c6065f45738e"



--000000000000ba04c6065f45738e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: quoted-printable



Veel huishoudens betalen te veel voor energie zonder het te weten. Kleine =

=20

aanpassingen kunnen al honderden euro's per jaar schelen.



Vul uw postcode in en ontdek direct wat u kunt besparen. De check is gratis=

=20

en vrijblijvend.



Bereken uw besparing



Uitschrijven =C2=B7 Optout





--=20

---------------------------------------

DISCLAIMER

---------------------------------------



This email may contain=20

confidential or copyrighted information of UNNES. If you are not the=20

intended recipient, please do not use or share this email. If received in=

=20

error, please notify the sender and delete it. Check for viruses; UNNES is=

=20

not liable for virus-related damages.

---------------------------------------









--000000000000ba04c6065f45738e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#1a1a1a;line-height:1.6;padding:20px;">



Veel huishoudens betalen te veel voor energie =

zonder het te weten. Kleine aanpassingen kunnen al honderden euro's per jaa=

r schelen.





Vul uw postcode in en ontdek direct wat u kunt=

besparen. De check is gratis en vrijblijvend.








display:inline-block;padding:12px 32px;background:#e8750a;color:#ffffff;tex=

t-decoration:none;font-size:15px;font-weight:bold;border-radius:4px;">Berek=

en uw besparing







.com#t/u/b79c5df7f8f424bbee52" style=3D"color:#999;">Uitschrijven
=C2=

=B7
=3D"color:#999;">Optout






"1" height=3D"1" alt=3D"">






------------------------------<=

wbr>---------
DISCLAIMER

e=3D"text-align:left">
------------------------------=

---------
This email may contain =

confidential or copyrighted information of UNNES. If you are not the intend=

ed recipient, please do not use or share this email. If received in error, =

please notify the sender and delete it. Check for viruses; UNNES is not lia=

ble for virus-related damages.
---=

------------------------------------




--000000000000ba04c6065f45738e--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Nov 2026 08:28:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNt1p-00000000NkU-3xds

for dave@doctor.nl2k.ab.ca;

Mon, 02 Nov 2026 08:28:53 -0600

Resent-From: The Doctor

Resent-Date: Mon, 2 Nov 2026 08:28:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f199.google.com ([209.85.128.199]:46145)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNlU1-00000000KaT-3rdz

for doctor@nk.ca;

Mon, 02 Nov 2026 00:25:31 -0600

Received: by mail-yw1-f199.google.com with SMTP id 00721157ae682-8b0d36c1db7so47945537b3.0

for ; Sun, 01 Nov 2026 22:24:35 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ame-edu-lr.20260707.gappssmtp.com; s=20260707; t=1793600669; x=1794205469; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=IdxqhPDc71+QmsLNxsSJJQ3oyS7I61pnCbqzMK0tGXk=;

b=A7SpKVMXEcbvL1mLGpc8KcCvmKbJnnXsBlT2z4siggHy2AtcZeMYLp6+8IeW/KGn0r

Y6Swq5q8xsl2nLXDddT0bXBYzzwjltNelYCvAf7/weuDDGNKynhJeH3WGfoI7fVWTz91

tNZtUwMBW1p/eAJHXFMqFzWKrlChaYx2PBM7ycMRV8JHOSGs+w/prJgTBmStGFlXUitl

t682XHjCktnBRlIO3maAm4BPeYNfaH03IppyV0KU8e0TzWcB1NCeI6vWrGvCYzXEaenq

sot0Cc3HB6ni3/7DwWYVxIuIxKSHFwnJleMGz5K8oYRY8dRVywM2Feo2ON+lnkgEg/VA

3p2g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793600669; x=1794205469;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=IdxqhPDc71+QmsLNxsSJJQ3oyS7I61pnCbqzMK0tGXk=;

b=RRCR2AdFUD8ruRKPgjDToeCWMdg5OA3593hMCIgdq9Ysux2Mdl4pCF98aumOZjIRJR

UbeDh6MxLfen1kUM/LrNjakPGCsIfiXUHyfGAzwXmxiefNu23rA5TyOpSHlSAnmONH1M

d9Gm3Q9CYWZbszhIGSGP5fXWXifo65Y2r1NMW141G+iFb0QembXNU3So4nmsJ2JfyRLO

TbgG28qv9ELMIIpyfoc69IPevNzFTBNewO2FQHl4V/C1suSFtPzQw0cVawvOa1FjFYxe

tpnAkhw2o047HGYOYOFYWdmUzkD6RUKVwHnIfqPwhOoPGGD/4G8Zz7xwUAnRKoMValSG

yKZg==

X-Gm-Message-State: APuU4Z+L515TBIG4e7gM3WKKPdVxEUKIliC5WcKSud4M6M28p+N38nGV

ikjxbEtGhRj1nA0K7xZOz6As/Tz7+toz5Qa8C7fHBTXBz/z+zgEzlbZVize2tryXNJV3bgZJuf9

KD6OtmqhCqQM3brC8lLOHJ5h2

MIME-Version: 1.0

X-Received: by 2002:a05:690e:4548:10b0:679:b744:a2f7 with SMTP id

956f58d0204a3-67ba4fb945amr4670226d50.59.1793600669298; Sun, 01 Nov 2026

22:24:29 -0800 (PST)

Message-ID:

Date: Mon, 02 Nov 2026 06:24:29 +0000

Subject: Auto te warm in de zon?

From: ANWB Ledenservice

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000c343b7065f453239"

X-Spam_score: 5.9

X-Spam_score_int: 59

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Een geparkeerde auto kan in de zon binnen een uur meer dan

60 graden worden. De ANWB Car Cooler houdt uw auto koel zonder stroom of

water. Speciaal voor ANWB-leden nu verkrijgbaar met korting. Bestel direct

en ontvang hem binnen 2 werkdagen.



Content analysis details: (5.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.199 listed in will-spam-for-food.eu.org]

[209.85.128.199 listed in will-spam-for-food.eu.org]

[209.85.128.199 listed in will-spam-for-food.eu.org]

[209.85.128.199 listed in will-spam-for-food.eu.org]

[209.85.128.199 listed in will-spam-for-food.eu.org]

[209.85.128.199 listed in will-spam-for-food.eu.org]

[209.85.128.199 listed in will-spam-for-food.eu.org]

[209.85.128.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.199 listed in dnsbl.ahbl.org]

[209.85.128.199 listed in dnsbl.ahbl.org]

[209.85.128.199 listed in dnsbl.ahbl.org]

[209.85.128.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.199 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.199 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.199 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.199 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 TW_JG BODY: Odd Letter Triples with JG

1.0 OPT_OUT BODY: No description available.

0.1 TW_IJ BODY: Odd Letter Triples with IJ

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Auto te warm in de zon?



--000000000000c343b7065f453239

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



RWVuIGdlcGFya2VlcmRlIGF1dG8ga2FuIGluIGRlIHpvbiBiaW5uZW4gZWVuIHV1ciBtZWVyIGRh

biA2MCBncmFkZW4gIA0Kd29yZGVuLiBEZSBBTldCIENhciBDb29sZXIgaG91ZHQgdXcgYXV0byBr

b2VsIHpvbmRlciBzdHJvb20gb2Ygd2F0ZXIuDQoNClNwZWNpYWFsIHZvb3IgQU5XQi1sZWRlbiBu

dSB2ZXJrcmlqZ2JhYXIgbWV0IGtvcnRpbmcuIEJlc3RlbCBkaXJlY3QgZW4gIA0Kb250dmFuZyBo

ZW0gYmlubmVuIDIgd2Vya2RhZ2VuLg0KDQpCZWtpamsgZGUgYWFuYmllZGluZw0KDQpVaXRzY2hy

aWp2ZW4gwrcgT3B0b3V0DQoNCg==

--000000000000c343b7065f453239

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#1a1a1a;line-height:1.6;padding:20px;">



Een geparkeerde auto kan in de zon binnen een =

uur meer dan 60 graden worden. De ANWB Car Cooler houdt uw auto koel zonder=

stroom of water.





Speciaal voor ANWB-leden nu verkrijgbaar met k=

orting. Bestel direct en ontvang hem binnen 2 werkdagen.








lay:inline-block;padding:12px 32px;background:#003580;color:#ffffff;text-de=

coration:none;font-size:15px;font-weight:bold;border-radius:4px;">Bekijk de=

aanbieding







#t/u/472e9a92b307fc6479e3" style=3D"color:#999;">Uitschrijven
=C2=B7
href=3D"https://esscapeewhmy.net#t/p/472e9a92b307fc6479e3" style=3D"color:=

#999;">Optout






height=3D"1" alt=3D"">



--000000000000c343b7065f453239--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 23:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNkzC-00000000Gks-2Ur2

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 23:53:38 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 23:53:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f71.google.com ([209.85.210.71]:54504)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNkqP-00000000Fir-1f0u

for doctor@nk.ca;

Sun, 01 Nov 2026 23:44:35 -0600

Received: by mail-ot1-f71.google.com with SMTP id 46e09a7af769-845156f593bso1529296a34.0

for ; Sun, 01 Nov 2026 21:43:39 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=bru-ac-th.20260707.gappssmtp.com; s=20260707; t=1793598213; x=1794203013; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=3kfJ5cEI9TA9eQJ1XyZK1q5WLP4q09rzeYpycEfaVko=;

b=J80R4UQVO/7U42hFHd0rjj8uEyDSFBxZhxK5UVZ+TaAMAtCop3V7nfPwc3umrwX7A6

HdLkZqOe+S6CappuycDxOG3CUsj3lxk0I0fbyfSIFz6cTs8oLsx/82nFif0ROnFHYwF+

VOEA8DBtJe6tPrbK0AArM3nR95AEDJfWooXQUw5kt4iBFtORkct2lou1P/cHCB9Q816f

eR7UA66SKXioUpkscZL4k+NEXWzYTXCzfKziKCTKUKbVWY8svnSz0ekGB7oFlruKT8/8

CC5l/IzxifPX7QGUvxJmGCO/XUizYLZn8/EQ8erYMmrL5ctI+HbEzMOD5k1EBKh6OV7/

3b2A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793598213; x=1794203013;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=3kfJ5cEI9TA9eQJ1XyZK1q5WLP4q09rzeYpycEfaVko=;

b=aJ29ITXrH2CvlO2Q2VdiP0l2Ep7LjIyXmMZ1q/TUZffPX9rrCYYLN4bcdpPAQA7T/B

Eq9a2/m9Lcr3qJ+NWRIwq4VrkqjCLh9K9xr+nj1sjJTFkQiRL42PrV2Sw+QIm0sExK7U

1fer5wA2Y//vD+earBaBwVR/3cX45ncxyAC84whBLhUX41K5Wv6pooqignDsblH3KUtp

7tqAW6XIELhBIixgdIlmZXG+qZ3RaZqcpZ24wdH7NrfzrWKCQ6RMoj8zwLC8xVc5G8I7

0kItcrH9EIMfUkbwPBjeVqXX7uWXgCsQnZ1j0PreCaxIFW5fFMYEiA04yCT3UPzQf+Qc

/Gcw==

X-Gm-Message-State: AFq9FYIL/lIscVERaIubORcJ+sbPlqsJLvfk6KPco6nBag/9iDAwNOA3

AkXTB8N/Ln3seO6BHAGEzatenUJOgdAEcEow9vh66CAjbreWhsgjQZD6a+3OmIrL7AhhkZbhRrJ

6XgYXCyRkhfLqRFpQHs19Ro4c

MIME-Version: 1.0

X-Received: by 2002:a05:6808:6508:b0:55c:6aa:14f7 with SMTP id

5614622812f47-5640dcea008mr6066031b6e.21.1793598213533; Sun, 01 Nov 2026

21:43:33 -0800 (PST)

Message-ID:

Date: Mon, 02 Nov 2026 05:43:33 +0000

Subject: Uw pakket is onderweg

From: DHL Bezorgservice

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000634481065f44a089"

X-Spam_score: 5.9

X-Spam_score_int: 59

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Er staat een levering voor u klaar. Uw zending is verwerkt

en kan op elk moment worden bezorgd. Volg uw pakket en kies een bezorgmoment

dat u uitkomt. U kunt ook een afleveradres of afhaalpunt wijzigen.



Content analysis details: (5.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.71 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.71 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.71 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 OPT_OUT BODY: No description available.

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Uw pakket is onderweg



--000000000000634481065f44a089

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



RXIgc3RhYXQgZWVuIGxldmVyaW5nIHZvb3IgdSBrbGFhci4gVXcgemVuZGluZyBpcyB2ZXJ3ZXJr

dCBlbiBrYW4gb3AgZWxrICANCm1vbWVudCB3b3JkZW4gYmV6b3JnZC4NCg0KVm9sZyB1dyBwYWtr

ZXQgZW4ga2llcyBlZW4gYmV6b3JnbW9tZW50IGRhdCB1IHVpdGtvbXQuIFUga3VudCBvb2sgZWVu

ICANCmFmbGV2ZXJhZHJlcyBvZiBhZmhhYWxwdW50IHdpanppZ2VuLg0KDQpWb2xnIHV3IHBha2tl

dA0KDQpVaXRzY2hyaWp2ZW4gwrcgT3B0b3V0DQoNCg==

--000000000000634481065f44a089

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#1a1a1a;line-height:1.6;padding:20px;">



Er staat een levering voor u klaar. Uw zending=

is verwerkt en kan op elk moment worden bezorgd.





Volg uw pakket en kies een bezorgmoment dat u =

uitkomt. U kunt ook een afleveradres of afhaalpunt wijzigen.








y:inline-block;padding:12px 32px;background:#d40511;color:#ffffff;text-deco=

ration:none;font-size:15px;font-weight:bold;border-radius:4px;">Volg uw pak=

ket







/u/5cd7041da0f6497deeb3" style=3D"color:#999;">Uitschrijven
=C2=B7
ref=3D"https://ionixchaan.com#t/p/5cd7041da0f6497deeb3" style=3D"color:#999=

;">Optout






ight=3D"1" alt=3D"">



--000000000000634481065f44a089--

Web/SEO/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 23:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNkhd-00000000Ez0-31D1

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 23:35:29 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 23:35:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f197.google.com ([209.85.128.197]:59795)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <3RB7oagoTBn85esulpduldvfxrodorfdwh.hgx.lwgrfwruqn.fd@maestro.bounces.google.com>)

id 1xNkWm-00000000DjH-1JYA

for doctor@nk.ca;

Sun, 01 Nov 2026 23:24:18 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-8acc7fe346cso41031297b3.3

for ; Sun, 01 Nov 2026 21:23:22 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=scuolalocate-edu-it.20260707.gappssmtp.com; s=20260707; t=1793596997; x=1794201797; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=XoJA/bO1NWBj4FHsGrd0qZgj3Vzti91cLfWo5rKAwCM=;

b=ZBbWxl22P16nobc/8hpPgCd8ZRfDBz6qil1zppTNrHamlczgI5jPfk6d253CcvJmhi

bggSIA2mO1FKf4pwW96tVKWLemibC0Oj27mw1/+4zuDOIEI+kBcnAu/SQ5tUiZkWSsAo

jyk5XY1Vx/C2tWDx6Ikve6EY0QfFgfVUd8M0PtXIER9yGSE8tIpYAsXiRJ1F9bPpma7q

BnQ+ghc4iKHgdZR3D3sfZttZvM/Jfj4geUFjL3oSIQwQPLCxKzmTSsfS9VTCsoGMeay0

wviWNX52/fv92UubXS5j4a+HfHD2WnSAg8VoZ/GfRvneXBtypp7ak3ZdvgOA78gt/3Vr

jZtQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793596997; x=1794201797;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=XoJA/bO1NWBj4FHsGrd0qZgj3Vzti91cLfWo5rKAwCM=;

b=vYTY045MnZFaaqb6iATgYftznTkBXmyABVsf5+hBdLyIauBfAgivZGWpX3TfjvJUnD

bmJ+CAZZjKScP5S6+2otXHEz40uUpTYr6xmUoRWm2D1oGvy6umTwdasOaaYBjDlmyH5D

31KvPPcXcGZ2y8Vk2cCs9QtDy4dk2JwB9dAp+px7CpimErf2EA00ozQlgaSuvvCRxEpf

hUYzHIljlgA6T9LREHiDtMIPQtzfnM0RXB7Mv31L2f3m1tc0wmouuW/UZ0E5EKJqJP1h

I0JApF2riKrbt+T78nrpjZ6fiP3lzNJmdbpfE5TmQs/FabLXZ9wd8TomAgzr7TJUNx9o

4Tqw==

X-Gm-Message-State: APuU4Z8JC4SS/yOdCvkEQWlD4n6Ri+TIG8FnNgPcWPjyxGolCNYskk/l

ZsMGhHX6TuDFsXZ8yDg7mMhOX1d1hckghuTwAikkHiN2AxNrP8WuNsJheh1g9cHvUOp7sMMqia9

TdqPDbue9UGt5Ps41knI8RTs+

MIME-Version: 1.0

X-Received: by 2002:a05:690c:c50d:b0:8ab:4f41:c97f with SMTP id

00721157ae682-8b2b6719327mr58168267b3.30.1793596996605; Sun, 01 Nov 2026

21:23:16 -0800 (PST)

Message-ID:

Date: Mon, 02 Nov 2026 05:23:16 +0000

Subject: Past een warmtepomp bij uw woning?

From: Anna van Warmtepomp Expert <2bprimaria@scuolalocate.edu.it>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000da6fca065f4457d4"

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Niet elke woning is geschikt voor een warmtepomp. Het hangt

af van uw isolatie, verwarmingssysteem en beschikbare ruimte. Met de gratis

Warmtepomp Quiz ontdekt u binnen 2 minuten welk type bij uw situatie past

en wat de verwachte besparing is.



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.197 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_IK BODY: Odd Letter Triples with IK

1.0 OPT_OUT BODY: No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.197 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.197 listed in bl.score.senderscore.com]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Past een warmtepomp bij uw woning?



--000000000000da6fca065f4457d4

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TmlldCBlbGtlIHdvbmluZyBpcyBnZXNjaGlrdCB2b29yIGVlbiB3YXJtdGVwb21wLiBIZXQgaGFu

Z3QgYWYgdmFuIHV3ICANCmlzb2xhdGllLCB2ZXJ3YXJtaW5nc3N5c3RlZW0gZW4gYmVzY2hpa2Jh

cmUgcnVpbXRlLg0KDQpNZXQgZGUgZ3JhdGlzIFdhcm10ZXBvbXAgUXVpeiBvbnRkZWt0IHUgYmlu

bmVuIDIgbWludXRlbiB3ZWxrIHR5cGUgYmlqIHV3ICANCnNpdHVhdGllIHBhc3QgZW4gd2F0IGRl

IHZlcndhY2h0ZSBiZXNwYXJpbmcgaXMuDQoNClN0YXJ0IGRlIHF1aXoNCg0KVWl0c2NocmlqdmVu

IMK3IE9wdG91dA0KDQo=

--000000000000da6fca065f4457d4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#1a1a1a;line-height:1.6;padding:20px;">



Niet elke woning is geschikt voor een warmtepo=

mp. Het hangt af van uw isolatie, verwarmingssysteem en beschikbare ruimte.=





Met de gratis Warmtepomp Quiz ontdekt u binnen=

2 minuten welk type bij uw situatie past en wat de verwachte besparing is.=








y:inline-block;padding:12px 32px;background:#1a6b8a;color:#ffffff;text-deco=

ration:none;font-size:15px;font-weight:bold;border-radius:4px;">Start de qu=

iz







/u/2454558e03dd8bb8f435" style=3D"color:#999;">Uitschrijven
=C2=B7
ref=3D"https://ionixchqin.com#t/p/2454558e03dd8bb8f435" style=3D"color:#999=

;">Optout






ight=3D"1" alt=3D"">



--000000000000da6fca065f4457d4--

WEb/SEo/App spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 Nov 2026 08:27:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNt0i-00000000Neg-0BlW

for dave@doctor.nl2k.ab.ca;

Mon, 02 Nov 2026 08:27:44 -0600

Resent-From: The Doctor

Resent-Date: Mon, 2 Nov 2026 08:27:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from srv.casinolinksmarket.com ([103.191.50.85]:47462)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNgsi-00000000CKk-3A3x

for sales@nk.ca;

Sun, 01 Nov 2026 19:30:44 -0600

Received: from [173.208.155.181] (port=54357 helo=vps-pdqb)

by srv.casinolinksmarket.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100)

(envelope-from )

id 1xNgrl-0000000BbVB-1Tq0

for sales@nk.ca;

Mon, 02 Nov 2026 07:29:40 +0600

From: Casino Links Market LTD

Date: Sun, 01 Nov 2026 19:29:37 -0600

Subject: Looking for SEO Sites? I Can Help

Message-Id: <2YUKBI11QUU4.5JIJHOC1HZLB2@vps-pdqb>

To: sales@nk.ca

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - srv.casinolinksmarket.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - casinolinksmarket.com

X-Get-Message-Sender-Via: srv.casinolinksmarket.com: authenticated_id: casinolinksmarke/from_h

X-Authenticated-Sender: srv.casinolinksmarket.com: hello@casinolinksmarket.com

X-Source:

X-Source-Args:

X-Source-Dir:



Hey,
I hope you are well,
Could you please let me know which country and niche you’re looking for? Also, what is your budget per placement?
Once I have these details, it will be much easier for me to prepare a list that matches your requirements. This will also save your time by ensuring I only send the most relevant opportunities.
I look forward to your response.
Thank you!
Best regards

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 17:52:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNfLb-00000000N1z-05h4

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 17:52:23 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 17:52:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f199.google.com ([209.85.221.199]:48427)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNdoy-000000001rA-0r0v

for doctor@nk.ca;

Sun, 01 Nov 2026 16:14:37 -0600

Received: by mail-vk1-f199.google.com with SMTP id 71dfb90a1353d-5ec8c86fb91so94732e0c.1

for ; Sun, 01 Nov 2026 14:13:42 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=iqra.edu.pk; s=google; t=1793571216; x=1794176016; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=f6Uuodq6zkMYijgV2FGlBtcnnG8ZvjKkIkRzDbvMqpo=;

b=lYJYRVEvnISLiMMxyT3zZd0fgg3HFhvC0+b2/+DjcTyVth7QkWg8SnXJHXveIbJmdZ

bHK8fs4Dmpq5tsjQhhD6jarMeTDTofUzJpNLQ/BJYKqsMgOzZW4PleX5Yo6+SKmbug6P

TNBZCNk6+n0y/l0dPD3pRRcziYMhKoWmhpupZRTsoLSMvsYy4tW+2mNOG7ram13aR1/Z

0IA7cR1pe26YarCYTZv9DjzJ21RN+/ZV0uPUis0gAsck1+VKTyfiEKZNe/iKDp2OC42b

JkD0RQ464CrY62EqS3SDkreE5Agl9ruU9xEM+xPsnt1VC2hpc41SNR0+LBSpQorYW+kl

uxTw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793571216; x=1794176016;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=f6Uuodq6zkMYijgV2FGlBtcnnG8ZvjKkIkRzDbvMqpo=;

b=KM3k8AzmEl58bflOCaCMpdPA1dRaGLXVF1LeGoEAus9DzcfaNR5eaWJQW0themdWWc

HmTFqsr0UiDUkfzrNrPWeben/jEnVIUN60/XTE1mIWUt3SuL9tE+Q2gcV+j3P1vRFPj+

cu/4eDJfF9Z+pb59OJf9dZMrwfy/qhen/oeKpLAmPndBlywIPih+XWJUHFjUV4lfcQX8

7UlL8S8n3tBihUQYUcZKNS6DUQuUGGVbuFT/s0VA5fXxfoeVSgjSu4WvdBYOE528TB/N

eXsgzXwUDk1aFdDkxWpSUrx5uTI8NXUfzvbddft3rS3NLBG/g3NApJqBVvWfBIl0LrBW

OCdw==

X-Gm-Message-State: APuU4Z+HiuGVMshaCIEQV5DuvmfnkSYp4EH3SxHZOIRpk+XG0s8Rwi9h

P/O9sMWCs1tT40Td4y51cOqUts9zhHiFb1fnYpBVtNq5FGN+PhVkEcDnpoQARHEN8DrRx6WDG1h

dvHG1zMil46atUZ3RVT6IduHO1HkisWSnpxDxLGkBMng35xMqTtcuBP2GnKm2Ih+vNkawlzQ=

MIME-Version: 1.0

X-Received: by 2002:a05:6102:148c:b0:7c3:9464:efaa with SMTP id

ada2fe7eead31-7d07223f482mr3721116137.2.1793571215793; Sun, 01 Nov 2026

14:13:35 -0800 (PST)

Message-ID:

Date: Sun, 01 Nov 2026 22:13:35 +0000

Subject: Uw pakket is onderweg

From: Bezorgservice

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000003270a9065f3e57a6"

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Geachte klant, Er is een pakket naar u onderweg. Volg uw zending

in real-time via onze Track and Trace service. Volg uw pakket



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: iqra.edu.pk]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.199 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.221.199 listed in bl.score.senderscore.com]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Uw pakket is onderweg



--0000000000003270a9065f3e57a6

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Geachte klant,



Er is een pakket naar u onderweg. Volg uw zending in real-time via onze

Track and Trace service.



Volg uw pakket



Met vriendelijke groet,

Bezorgservice



Uitschrijven | Afmelden





--





--0000000000003270a9065f3e57a6

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#333;padding:20px;line-height:1.6">

Geachte klant,



Er is een pakket naar u onderweg. Volg uw zending in real-time via onze =

Track and Trace service.




f3b627e5ed57" style=3D"display:inline-block;padding:13px 26px;background:#0=

03049;color:#fff;text-decoration:none;border-radius:5px;font-size:15px">Vol=

g uw pakket



Met vriendelijke groet,
Bezorgservice




#eee;padding-top:12px">
27e5ed57" style=3D"color:#999">Uitschrijven
|
calles.com#t/p/db3b037ff3b627e5ed57" style=3D"color:#999">Afmelden






height=3D"1" alt=3D"">




=




--0000000000003270a9065f3e57a6--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 01 Nov 2026 17:52:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNfLX-00000000MzW-1Ml8

for dave@doctor.nl2k.ab.ca;

Sun, 01 Nov 2026 17:52:19 -0600

Resent-From: The Doctor

Resent-Date: Sun, 1 Nov 2026 17:52:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f71.google.com ([209.85.217.71]:54386)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xNdnl-000000001gE-2Yhm

for doctor@nk.ca;

Sun, 01 Nov 2026 16:13:23 -0600

Received: by mail-vs1-f71.google.com with SMTP id ada2fe7eead31-7cc36b97a77so662679137.0

for ; Sun, 01 Nov 2026 14:12:27 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=iqra.edu.pk; s=google; t=1793571141; x=1794175941; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=M//DUcJXR+27mETYnxHTCr+JhwQnOJ1OmnysqfMK7Hs=;

b=mnGfQVovZ9YxDSToGlnDO7kyQiKDOAhWMdxUyrZB7s1yFn2wUn0703mIPHNlLa8k/n

3M2PDAOI9qz5AzTYysF9lChYANOyiMtcA5ZayRQp7E0X4dGRMbKT1005FQu1r5ICtlot

FgI9CIeYyglMR0uX21IsgC3uNSrJ2/+1x8BUEj2qMC2WT9U8zv131l7NSO2aMVwjJ9Bu

rpzq5mXWEiE6bTkOsSXYBaquKeobCnArxEhstr5lZOoK8S/M7RewhMSQSLfbyeYSFqE1

e9fcoyQvBGNZfy+fGnvgUzcAkxWiGSR5i+AjEtOMdRqN2C592C34dqEjFRH+qsNLtIlw

tRBg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793571141; x=1794175941;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=M//DUcJXR+27mETYnxHTCr+JhwQnOJ1OmnysqfMK7Hs=;

b=VawzpLmccK1gRlIcfTImvJG9oAX2P9H42ax36tb3g8+vtonpjnAorLkPuBnTv7J2Rr

mImPC5LZQGrXubnCVoB4XOY47VS5chHzS0fwjl57Wzq/2zax2ulsm46ace0UbazZ1eYx

OaUSRm3ZpCUVqQav9zZQFRMFRrRtpvs5G2DuSMBHnNn4IDPZKAC3qbxKeza09Imrgsfg

xbTlHU/RiR8EFlvi2E/LN+U0AwI8HXCDwM6AlOZrXBfGt3k3rc4GSZOtbP7dTo0Tdi5e

L9bHHyOSJ6YReieBc2DDNfYmaUv2OKZdYkHnGxdT3XaU/tZHKr1+6OfGn2g1gUsWfkmw

zmsw==

X-Gm-Message-State: APuU4Z9deepx76tjoBcMD6Tb+BP0HMGMyAZpaNoeYJCV4H4zVXTN8HXT

dOf+DeTQY7FdNWX0eyfw0jeHHG143uvMrBlZYCGFuJkspJ2+/MsWENQ4odu0LoKAs1wMwXvMLbK

63j+XQCz/XsbBE13OtlFszMQSIl4i1iNVNwaHGX0hJgdazYxI1wcN7M6e9qy1SAV6i6IxBdk=

MIME-Version: 1.0

X-Received: by 2002:a05:6102:508e:b0:7b2:508e:3d57 with SMTP id

ada2fe7eead31-7d0727b109amr2731681137.4.1793571141186; Sun, 01 Nov 2026

14:12:21 -0800 (PST)

Message-ID:

Date: Sun, 01 Nov 2026 22:12:21 +0000

Subject: Uw pakket is onderweg

From: Bezorgservice

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000c01218065f3e52ff"

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Geachte klant, Er is een pakket naar u onderweg. Volg uw zending

in real-time via onze Track and Trace service. Volg uw pakket



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: iqra.edu.pk]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.71 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.71 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.217.71 listed in bl.score.senderscore.com]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Uw pakket is onderweg



--000000000000c01218065f3e52ff

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Geachte klant,



Er is een pakket naar u onderweg. Volg uw zending in real-time via onze

Track and Trace service.



Volg uw pakket



Met vriendelijke groet,

Bezorgservice



Uitschrijven | Afmelden





--





--000000000000c01218065f3e52ff

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




lor:#333;padding:20px;line-height:1.6">

Geachte klant,



Er is een pakket naar u onderweg. Volg uw zending in real-time via onze =

Track and Trace service.




f3b627e5ed57" style=3D"display:inline-block;padding:13px 26px;background:#0=

03049;color:#fff;text-decoration:none;border-radius:5px;font-size:15px">Vol=

g uw pakket



Met vriendelijke groet,
Bezorgservice




#eee;padding-top:12px">
27e5ed57" style=3D"color:#999">Uitschrijven
|
calles.com#t/p/db3b037ff3b627e5ed57" style=3D"color:#999">Afmelden






height=3D"1" alt=3D"">




=




--000000000000c01218065f3e52ff--