CVS Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 11:24:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVEEn-00000000Lj7-0KyE

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 11:23:33 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 11:23:33 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.172.205.13] (port=50757 helo=bintangkejora.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tVBmi-000000009Gf-2CSP

for doctor@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 08:46:33 -0700

Received: from a27-123.smtp-out.us-west-2.amazonses.com (a27-123.smtp-out.us-west-2.amazonses.com. [54.240.27.123])

by mx.google.com with ESMTPS id 41be03b00d2f7-7fc9c380b6asi13165356a12.713.2024.12.03.02.38.25

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 03 Dec 2024 02:38:25 -0800 (PST)

Received-SPF: pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) client-ip=54.240.27.123;

Authentication-Results: mx.google.com;

dkim=pass header.i=@tradingview.com header.s=k3edjogkpt66rlyhj672zwuhwslbz2h3 header.b=iyp0HoRg;

dkim=pass header.i=@amazonses.com header.s=7v7vs6w47njt4pimodk5mmttbegzsi6n header.b=bTUUu6ko;

spf=pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) smtp.mailfrom=010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com;

dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=tradingview.com

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=k3edjogkpt66rlyhj672zwuhwslbz2h3; d=tradingview.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=iyp0HoRg6YAS9XqtmgsdeBnHxdrOaVNEdSmJttGga+0T+zLL1PQf8yuuGcv7heqZ dr3Tl+iKq7ylVZrFowhBZzUlJMbtcckUT+fXHIKeJL3i4PEIrc2pBTYSmtRz5SiW00q IFahIaDXDDaZZkWgTx/WbwYHAD9WQfis1L2HGuR0=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=7v7vs6w47njt4pimodk5mmttbegzsi6n; d=amazonses.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID:Feedback-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=bTUUu6koxPRDHyQ4qwhhH4OFIh5WCSVstGzqCpvebub14X2nOStPnwoNauNVGhDC lqpL9VESJcnQD7LAIDRemkJVfBSA7euDfLhPd29Oui/eCyzWLUUmlHr4gENFPg59Eh1 jVvOku8vhth5ZuQSKP2DjmqxYB4NEK97F/67yRuI=

Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.HzDjVMA4YNkXDP"

Date: [email_date]

From: "CVS Customer Care"

Mime-Version: 1.0

Message-ID:

Subject: You’ve Been Chosen! Claim Your CVS Exclusive Reward!

X-Feedback-ID: 93814904:SG

X-SG-EID: Qu89kMhlMaXfAuk3eqJRl8R4R8PyURyJSA7zbvjeOxNSWjUo43K6ss8EFY4dKJAOis4dGDSSceGOzgr4sFvCxFINe5G2kqVlThqG+xs40Pj53DsKpwpROhU9oGnwh4jFwVvKkmjmv4n0cTRUmo4WzWo36DL76tBPhJflbNx8riNP126jnKbeVXvi57HTKTb4aXoq7snSOrnZUlILY+kavKHcJNbUQx04ovsOfNAQLWyYSMhY0x5XreM1PQ+gTlrcDZjcVZmJsv2T7FzgO0qN1v==

X-SG-ID: tvz3FlNaWaZK4Xpr0pXQGLSWcuzy2675C4L3uUB9D/77lLafHd32uDA31TDA8JOInXSKhNT9bZYCT3r4EFqZQnpX8Tc3NAnzvPIAKZvaj7E4V9A6/3vvbv/+SgRaaKtGJ6IoHx4KNnJtSAPOVsjehQq1F12UbuwojM/Iqpe2u+7oSvonZqiDt/1h0uKxdvjEGp7XJRCbPTigc9sv/SgRaaKtGJ6IoHx4KNnJtSAPOVsjehQq1F12UbuwojM+NSYDnkUdr5/q5jO7rYzQUSpCbTlZI4VaTe1GLbDJgyTxlUdjF+1h0uKxdvjEGp7XJRCbPTigc9sv+1ws15ysmj0Z3sK2KWvnUkaYEl5hi5XYZjyeKWXddHQFVp/B1QxwvtNsOucgJccMswDJqH6J9jrMmA==

To:

X-Entity-ID: u001.SSBJNYNGWMF3Y16ZPVXEJU==

X-Spam_score: 15.8

X-Spam_score_int: 158

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm your email address Click here to confirm your

email address To receive HubSpot content on marketing, sales and/or service

topics - please confirm your email address. You will be added to our email

distribution list. You can unsubscribe at any time. DKJZEACW Th [...]



Content analysis details: (15.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[103.172.205.13 listed in dnsbl.ahbl.org]

[103.172.205.13 listed in dnsbl.ahbl.org]

[103.172.205.13 listed in dnsbl.ahbl.org]

[103.172.205.13 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[103.172.205.13 listed in wl.mailspike.net]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

3.2 HTML_TAG_BALANCE_CENTER Malformatted HTML

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.6 HREF_EMPTY_NORDNS Empty href + no rDNS

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} You’ve Been Chosen! Claim Your CVS Exclusive Reward!



------=_Part_9006_1222595691.HzDjVMA4YNkXDP

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Please confirm your email address



Click here to confirm your email address



To receive HubSpot content on marketing, sales and/or service topics -Â please confirm your email address. You will be added to our email distribution list. You can unsubscribe at any time.

DKJZEACW

The 90s had seen the apotheosis of the form, including Take That and Backstreet Boys, but those bands’ robust anthems and breezy dance-pop seemed to flame out in 2001 with the over-egged futurism of ‘NSync’s Pop, the first single from an album with the jaded title Celebrity.

Thanks,



The HubSpot Team



HubSpot, 25 1st St., Cambridge, MA 02141, USA, 888-482-7768



HubSpot, 2 Canal Park, , Cambridge, MA 02141, USA, 888-482-7768









Unsubscribe (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe-all?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )



Manage preferences (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )

------=_Part_9006_1222595691.HzDjVMA4YNkXDP

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Bitte bestätigen Sie Ihre E-Mail-Adresse there | Confirm your e-mail address there

































You’ve Been Chosen! Claim Your CVS Exclusive Reward!











Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA 1CAPTCHA 2CAPTCHA 3CAPTCHA 4CAPTCHA 5


Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA 1CAPTCHA 2CAPTCHA 3CAPTCHA 4CAPTCHA 5