Dutch language phish from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 21 Oct 2026 07:12:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xJW6i-00000000NYh-0CEp
for dave@doctor.nl2k.ab.ca;
Wed, 21 Oct 2026 07:11:52 -0600
Resent-From: The Doctor
Resent-Date: Wed, 21 Oct 2026 07:11:51 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ua1-f70.google.com ([209.85.222.70]:43464)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xJRd3-00000000MGM-3Nv1
for doctor@nk.ca;
Wed, 21 Oct 2026 02:25:05 -0600
Received: by mail-ua1-f70.google.com with SMTP id a1e0cc1a2514c-990c957f129so846132241.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=wlcormoc-edu-ph.20251104.gappssmtp.com; s=20251104; t=1792571043; x=1793175843; darn=nk.ca;
h=content-type:to:from:subject:date:message-id:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=Eobd3JRuL1L678yYgClw5wnDITjOvrdgG+69ZqpCys8=;
b=0KxcvFOIeQIAt8AJmqzp376MMdqFht8HfjI1OzomLoh9u9syY94Vg0qWoJSIkE0EA/
eoYTouB0dwVvmE2TDZFvP7NdV3I4gw3mmVQ3BXG5on/6V2dgx1XuH2wYf6kgi0DE5aEj
2ckLhThw46BqYyYc6YpiW6hT/iJNVxbDEiUD91e342OGPpbtothdFwVrAG+Y5TgRVqqM
TH5oApm4kWlwbKJunvXrfoi7No/vQfKXinra1cCUEcUXM4bZ9LhiUPzFS1ojeTmGRWxC
H5YhgJdIRTg2VGFmmfOthf0/7SH7Qw/vu8cm2EcCpcQ+wKS1RIF/FBY9ot79JvLZiaFN
evbA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1792571043; x=1793175843;
h=content-type:to:from:subject:date:message-id:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=Eobd3JRuL1L678yYgClw5wnDITjOvrdgG+69ZqpCys8=;
b=I+Kr02U3mwwjIBu94bGqcMN0re+IqFrT4+6IX76YQjgbxD1KlUDBCP8jWQjDkWOwHU
OlQ3XaBSKjxfniI5xck1VJz0lL16k4WVK123sUHrZmUiPHiSApDa/6oMniLy5QgsXgmC
VP4n+CzGyn6B5N/izej1qKvSvulsUqA+P5rRN52y99blS6H13nItiNA0F7DsqC9j0DGt
gKP47LgDf76kEK0MFVZ26jrh8wRkXgG6MDIH0Dr05YibFiqdQTS9pQCyXVAkyS7DVneL
kNKD3iZ2g7XycmTry8gKYQAPNZbMydrny0AdVvT7RDPpbs2tTroFpl2aJJWo66qaKu0v
wrrw==
X-Gm-Message-State: AFq9FYImZ1y4WwDX+eVAX6uBecD9GyrxZX9rzjaSywgrzhUpjgiWQHhJ
UtajkwE50X2xFXcTEu11KmoFpGM+xrMJ3iwDScQqQEXtIY4TY8RG3+eDmSePDTLHZ0woqY2taQN
d0aori6Iw2LPCAITAdtWoBxa+
MIME-Version: 1.0
X-Received: by 2002:a05:690e:138c:b0:679:bfcf:a0fe with SMTP id
956f58d0204a3-67a0e45e457mr662059d50.18.1792570625007; Wed, 21 Oct 2026
01:17:05 -0700 (PDT)
Message-ID:
Date: Wed, 21 Oct 2026 08:17:05 +0000
Subject: =?UTF-8?Q?Tot_30=25_subsidie_op_isolatie_=E2=80=93_check_jouw_besparin?=
=?UTF-8?Q?g_nu=21?=
From: Groene Woning Alliantie
To: doctor@nk.ca
Content-Type: multipart/alternative; boundary="00000000000056b076065e555f63"
X-Spam_score: 9.0
X-Spam_score_int: 90
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Woningisolatie met subsidie Tot 30% subsidie op woningisolatie
Mis deze kans op een lagere energierekening niet
Content analysis details: (9.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.222.70 listed in dnsbl.ahbl.org]
[209.85.222.70 listed in dnsbl.ahbl.org]
[209.85.222.70 listed in dnsbl.ahbl.org]
[209.85.222.70 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.222.70 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.222.70 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.222.70 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.222.70 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
[209.85.222.70 listed in will-spam-for-food.eu.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.70 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.222.70 listed in bl.score.senderscore.com]
0.1 TW_IK BODY: Odd Letter Triples with IK
1.0 OPT_OUT BODY: No description available.
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.70 listed in list.dnswl.org]
1.3 URI_HEX URI: URI hostname has long hexadecimal sequence
0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
Subject: {SPAM?} =?UTF-8?Q?Tot_30=25_subsidie_op_isolatie_=E2=80=93_check_jouw_besparin?=
=?UTF-8?Q?g_nu=21?=
X-Antivirus: AVG (VPS 261020-6, 10/20/2026), Inbound message
X-Antivirus-Status: Clean
--00000000000056b076065e555f63
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64
V29uaW5naXNvbGF0aWUgbWV0IHN1YnNpZGllDQoNCg0KVG90IDMwJSBzdWJzaWRpZSBvcCB3b25p
bmdpc29sYXRpZQ0KDQoNCg0KTWlzIGRlemUga2FucyBvcCBlZW4gbGFnZXJlIGVuZXJnaWVyZWtl
bmluZyBuaWV0DQoNCkRlIG92ZXJoZWlkIHN0ZWx0IHRpamRlbGlqayBzdWJzaWRpZSBiZXNjaGlr
YmFhciB2b29yIGhldCBpc29sZXJlbiB2YW4gamUgIA0Kd29uaW5nLiBFZW4gZ29lZCBnZcOvc29s
ZWVyZCBodWlzIGlzIHdhcm1lciBpbiBkZSB3aW50ZXIsIGtvZWxlciBpbiBkZSB6b21lciAgDQpl
biBkaXJlY3QgbWVya2JhYXIgb3AgamUgZW5lcmdpZXJla2VuaW5nLg0KDQoNCg0KDQrinJMgVG90
IDMwJSBzdWJzaWRpZSBvcCBkYWstLCB2bG9lci0gZW4gc3BvdXdtdXVyaXNvbGF0aWUNCg0K4pyT
IEdyYXRpcyB3b25pbmdzY2FuIOKAkyBvbnRkZWsgam91dyBiZXNwYXJpbmdzcG90ZW50aWVlbA0K
DQrinJMgTWVya2JhYXIgbGFnZXJlIHN0b29ra29zdGVuLCBqYWFyIG5hIGphYXINCg0KDQoNCg0K
SW4gMSBtaW51dXQgemllIGplIHdhYXIgaW4gam91dyB3b25pbmcgaGV0IG1lZXN0ZSB0ZSBiZXNw
YXJlbiB2YWx0IGVuIG9wICANCndlbGtlIHN1YnNpZGllIGplIHJlY2h0IGhlYnQuIERlIHJlZ2Vs
aW5nIGlzIHRpamRlbGlqayDigJMgbGFhdCBnZWVuIGdlbGQgIA0KbGlnZ2VuLg0KDQoNCg0KDQpE
b2UgZGUgZ3JhdGlzIHdvbmluZ3NjYW4NCg0KDQoNCg0KU3Vic2lkaWVwZXJjZW50YWdlcyBlbiBi
ZXNwYXJpbmdlbiB6aWpuIGluZGljYXRpZWYgZW4gYWZoYW5rZWxpamsgdmFuIGplICANCndvbmlu
ZywgZ2VtZWVudGUgZW4gZGUgZ2VsZGVuZGUgcmVnZWxpbmdlbi4gRGUgd29uaW5nc2NhbiBpcyBn
cmF0aXMgZW4gIA0KdnJpamJsaWp2ZW5kLg0KQWZtZWxkZW4NCg0KDQoNCg0KT3B0IG91dA0K
--00000000000056b076065e555f63
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=3D"0" border=3D"0" style=3D"background-color:#eef3ec;margin:0;padding:0;">
ing=3D"0" border=3D"0" style=3D"width:100%;max-width:600px;background-color=
:#ffffff;border-radius:10px;overflow:hidden;font-family:Arial,Helvetica,san=
s-serif;">
net/e/9ef748d1-585d-473f-a130-d9e713d170f0/984e4a2c-d837-4072-9338-de1da9b5=
f742.png" alt=3D"Woningisolatie met subsidie" width=3D"600" style=3D"displa=
y:block;border:0;width:100%;max-width:100%;height:auto;">
fff;font-weight:800;text-align:center;">Tot 30% subsidie op woningisolatie<=
/p>
3324;font-weight:800;">Mis deze kans op een lagere energierekening niet
>
or:#33453a;">De overheid stelt tijdelijk subsidie beschikbaar voor het isol=
eren van je woning. Een goed geïsoleerd huis is warmer in de winter, k=
oeler in de zomer en direct merkbaar op je energierekening.
ellspacing=3D"0" border=3D"0">
x;color:#2a3b31;">✓=
span> Tot 30% subsidie op dak-, vloer- en spouwmuuri=
solatie
x;color:#2a3b31;">✓=
span> Gratis woningscan – ontdek jouw besparin=
gspotentieel
x;color:#2a3b31;">✓=
span> Merkbaar lagere stookkosten, jaar na jaar=
a50;">In 1 minuut zie je waar in jouw woning het meeste te besparen valt en=
op welke subsidie je recht hebt. De regeling is tijdelijk – laat gee=
n geld liggen.
" border=3D"0">
>
VFCX5GV94SZ9ZJ2CGP164_0#t/c/6a160b3de6486f20a109" target=3D"_blank" style=
=3D"display:block;padding:18px 42px;font-family:Arial,sans-serif;font-size:=
20px;font-weight:800;color:#ffffff;text-decoration:none;">Doe de gratis won=
ingscan
78d;text-align:center;">Subsidiepercentages en besparingen zijn indicatief =
en afhankelijk van je woning, gemeente en de geldende regelingen. De woning=
scan is gratis en vrijblijvend.
lclick3.com/l/01M43VFCX5GV94SZ9ZJ2CGP164_0#t/u/6a160b3de6486f20a109" style=
=3D"color:#8a978d;text-decoration:underline;">Afmelden
a href=3D"https://XDxOhKAX5OPVqt@ctrk.klclick3.com/l/01M43VFCX5GV94SZ9ZJ2CG=
P164_0#t/p/6a160b3de6486f20a109" style=3D"color:#999;text-decoration:underl=
ine;">Opt out
CGP164_0/t/o/6a160b3de6486f20a109" width=3D"1" height=3D"1" alt=3D"">
--00000000000056b076065e555f63--