Dutch language phish from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 03 Oct 2026 10:35:13 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xD2hS-00000000L21-0xWJ
for dave@doctor.nl2k.ab.ca;
Sat, 03 Oct 2026 10:35:02 -0600
Resent-From: The Doctor
Resent-Date: Sat, 3 Oct 2026 10:35:02 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ua1-f72.google.com ([209.85.222.72]:39270)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xD1a6-00000000E76-0xRG
for doctor@nk.ca;
Sat, 03 Oct 2026 09:22:58 -0600
Received: by mail-ua1-f72.google.com with SMTP id a1e0cc1a2514c-98c49d39760so5307241.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=smhcostadelsol-com.20251104.gappssmtp.com; s=20251104; t=1791040914; x=1791645714; darn=nk.ca;
h=content-type:to:from:subject:date:message-id:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=7EpxVTK7Luf7mc0OkJgXGGtswbhflRWL0p/tYWQWUQg=;
b=NzgmKEl4eYkXAIyN0PdfRMe50rQ+intRdL5cwBSBWtWZ3W2WCGhSIcYHTzuLJABVdv
CcZ0MlR+IIsR01tivduM3b/icJTqJOJPqEPiVFkPr6mPh2nzxd7OpxaY4ZTO/oO3x10m
QBcboZqQHF+0ZxVCQWnu7NFTmYKtypssyt3oRZrzq4syOiDR3if4FZc02WwbwWHHHMPg
VTDPtbh7X2rwUlJKY1DgNBTStYTJZg0wzh+4tSeAeRMwbyjlq2At53w0WjDjgza+Ie75
XxOcygMex1FvH+DnF9AgQayCtW1/DskaS2zj40qkvRtEJFBR5BeGejxz0p7t9hztqhP8
kS2w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1791040914; x=1791645714;
h=content-type:to:from:subject:date:message-id:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=7EpxVTK7Luf7mc0OkJgXGGtswbhflRWL0p/tYWQWUQg=;
b=ft5K0e+qmmWm6DhfvbLgiQYJ4XIDU97fsCdn0u7m2Wig9YQaxJzBM1WZbHQXDPoRq3
AwCINBtnnz5xioHkqvcggYU12mAocgzTp9Bo3+XJh/ptgb2j+iyxXn3PrI76BQLMoJXj
5bmY+SUQu9bxlmJXXK6oba+FkSyRKpHjL9HFFVWfHnE1wFXTf586wu5bYbAcKyKUqQH8
QqGPU7PBcWGvruK8y6akh3cVJvmhpTRGDpTMxJrMi+lh3mIUHdHcNU8Pe3xowsK+HYt/
fnTTzvQzjnYlCJJxzBPkAgYIUPMdBAmiLtErPpLNqdK5d0r7z7Q0+RY0M/kaEDWwYXYz
J+Cg==
X-Gm-Message-State: AFq9FYIHwJ8ka7ktBDwzmNTy33D6APljlzaT7OhKcRhguLcKiVNuhtJt
AbFvK5pxFRKIZnFVTS6r5WevKTWwrAwmrbkeNTqlS7Da4F3lsMohR3QeYmDLSUVenpLfkqAers9
N8TeAaBrw/i11R4fGOvJsnyvO
MIME-Version: 1.0
X-Received: by 2002:a05:6102:4493:b0:7b4:9633:2dcd with SMTP id
ada2fe7eead31-7c0ef231831mr1093462137.0.1791040914668; Sat, 03 Oct 2026
08:21:54 -0700 (PDT)
Message-ID:
Date: Sat, 03 Oct 2026 15:21:54 +0000
Subject: =?UTF-8?Q?Uw_muur_lekt_warmte_=E2=80=94_en_subsidie_dekt_tot_30=25_van?=
=?UTF-8?Q?_de_kosten?=
From: Isolatie Advies NL
To: doctor@nk.ca
Content-Type: multipart/alternative; boundary="0000000000007f4415065cf13583"
X-Spam_score: 7.4
X-Spam_score_int: 74
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Isolatie Advies NL · Spouwmuurisolatie Als uw buitenmuur
koud aanvoelt van binnen, gaat er warmte verloren — elke dag, elke maand.
Spouwmuurisolatie is één van de meest effectieve woningverbeteringen die
u kunt doen. Woningen van vóór 1990 met een spouwmuur kunnen jaarlijks
€250 tot €500 besparen op stookkosten.
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.222.72 listed in will-spam-for-food.eu.org]
[209.85.222.72 listed in will-spam-for-food.eu.org]
[209.85.222.72 listed in will-spam-for-food.eu.org]
[209.85.222.72 listed in will-spam-for-food.eu.org]
[209.85.222.72 listed in will-spam-for-food.eu.org]
[209.85.222.72 listed in will-spam-for-food.eu.org]
[209.85.222.72 listed in will-spam-for-food.eu.org]
[209.85.222.72 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.222.72 listed in dnsbl.ahbl.org]
[209.85.222.72 listed in dnsbl.ahbl.org]
[209.85.222.72 listed in dnsbl.ahbl.org]
[209.85.222.72 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.222.72 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.222.72 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.222.72 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.222.72 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.72 listed in list.dnswl.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: cedarshadowland.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.222.72 listed in bl.score.senderscore.com]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: cedarshadowland.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.72 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 TW_JB BODY: Odd Letter Triples with JB
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} =?UTF-8?Q?Uw_muur_lekt_warmte_=E2=80=94_en_subsidie_dekt_tot_30=25_van?=
=?UTF-8?Q?_de_kosten?=
--0000000000007f4415065cf13583
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64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--0000000000007f4415065cf13583
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
content=3D"width=3Ddevice-width,initial-scale=3D1">
rgin:0;padding:0;background:#f5f0ea;font-family:Arial,sans-serif">
#eee">
Isolatie =
Advies NL is een onafhankelijk adviesplatform. Subsidiebedragen zijn richtl=
ijnen en afhankelijk van actuele regelgeving. Afmelden?
cedarshadowland.org/t/c/523d680fe68f7c80b4a9" style=3D"color:#bbb">Klik hie=
r.
1" height=3D"1" alt=3D"">
--0000000000007f4415065cf13583--

