crypto spam from sendgrid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 23 Jul 2022 15:55:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oFN4g-000GwB-MC

for dave@doctor.nl2k.ab.ca;

Sat, 23 Jul 2022 15:54:14 -0600

Resent-From: The Doctor

Resent-Date: Sat, 23 Jul 2022 15:54:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from xtrwkhkk.outbound-mail.sendgrid.net ([167.89.16.17]:28682)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oFLqJ-000AZv-ME

for root@nk.ca;

Sat, 23 Jul 2022 14:35:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cryonikinvestments.com;

h=from:subject:list-unsubscribe:mime-version:content-type:reply-to:to:

cc;

s=s1; bh=2lcVpKmBvrPbnQM/09gg0eDF9enZRdg+xowx/fUBYHA=;

b=hJ18gg/eNsIkhIB5fC86Ko6JSr+WJ2GEN1fGiTbAE8H8VRDnqyK25FVyNY3JDRXqqot7

TYeIDIe5rpP7xug/pCCOh+5nuHlXwxMmm2rVb3G2B5FeLcxqhkQ6Gi7FXbNxzxpPHjFuCQ

LwzP9vqVv18C2oB5ZN5mVFYqg6GD7KOlLfkVbi3bYfAo3VPpASP6QiZLZ7Cs5WoEFvk+z8

t/xcXbmzDhjP26/rs6X+dY1DGS9uHtIrHqCdGAV6SWd3JuGH/jvzo53kC43qxNqBpOg0mV

iX7DwSO5F3qbqV/t/m7Kei+quJBwhkbRVK/ILjkqU9ZzKzq+D+wjkYz6oUGkMk6A==

Received: by filterdrecv-86cfc59b8c-t5ts9 with SMTP id filterdrecv-86cfc59b8c-t5ts9-1-62DC5B6A-3

2022-07-23 20:34:50.240283772 +0000 UTC m=+174579.946729009

Received: from DESKTOP-EMH8AMJ (unknown)

by geopod-ismtpd-2-2 (SG)

with ESMTP id BH8znpjAR_-dYqzKlwLvJQ

for ;

Sat, 23 Jul 2022 20:34:49.890 +0000 (UTC)

From: Cryonik Investments

Subject: Invest & Earn profits from the new crypto market!

Date: Sat, 23 Jul 2022 20:34:50 +0000 (UTC)

List-Unsubscribe:

X-Priority: 3

X-Mailer: MailSender [version 2.0.3]

Mime-Version: 1.0

Content-Type: multipart/mixed; boundary="31314614D56F4007B62BF19EE7430F47"

Message-ID:

Reply-To: no-reply@cryonikinvestments.com

X-SG-EID:

=?us-ascii?Q?Vet7oqQcGGyc4YYmkfkEnfGp3wXlpUK4dLrvnpGH4pxAtZyifUtZ3HefHx2uMO?=

=?us-ascii?Q?DXQsAKOj2us6qZWdl1Yirm973EyxTT3px8AC4Ec?=

=?us-ascii?Q?+N4ub57BVbNR=2FqZ7WqRHV698J4jORlY6GGW5edH?=

=?us-ascii?Q?PZZutSd7Dhtlvvl776P96ujPOsP=2Fka3se5tYCJq?=

=?us-ascii?Q?SUN8bQ6IbJcZ=2Fs8KEJ1DpH8iZCneCV2Dd5FimPZ?=

=?us-ascii?Q?CCzpdoAdm5cG=2F1uTOjcqGsni6J=2Fea54tuLJ3tR?=

To: root@nk.ca

X-Entity-ID: ch0a6adaNwOMVOYDKtnQPQ==



--31314614D56F4007B62BF19EE7430F47

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: base64



PEhUTUwgbGFuZz1lbj48SEVBRD4NCjxNRVRBIG5hbWU9R0VORVJBVE9SIGNvbnRlbnQ9Ik1TSFRN

TCAxMS4wMC4xMDU3MC4xMDAxIj48L0hFQUQ+DQo8Qk9EWSBzdHlsZT0iRk9OVC1GQU1JTFk6IEhl

bHZldGljYSBOZXVlLCBTZWdvZSBVSSwgSGVsdmV0aWNhLCBBcmlhbCwgc2Fucy1zZXJpZjsgUEFE

RElORy1CT1RUT006IDIwcHg7IFBBRERJTkctVE9QOiAyMHB4OyBQQURESU5HLUxFRlQ6IDIwcHg7

IExJTkUtSEVJR0hUOiAxLjQzOyBQQURESU5HLVJJR0hUOiAyMHB4OyBCQUNLR1JPVU5ELUNPTE9S

OiAjMjIyNTMzIj4NCjxESVYgc3R5bGU9Ik1BWC1XSURUSDogNjAwcHg7IE1BUkdJTjogMHB4IGF1

dG87IEJBQ0tHUk9VTkQtQ09MT1I6ICNmZmY7IGJveC1zaGFkb3c6IDBweCAyMHB4IDUwcHggcmdi

YSgwLDAsMCwwLjA1KSI+DQo8VEFCTEUgc3R5bGU9IldJRFRIOiAxMDAlIj4NCjxUQk9EWT4NCjxU

Uj4NCjxURCBzdHlsZT0iQkFDS0dST1VORC1DT0xPUjogI2ZmZiI+PElNRyBzdHlsZT0iUEFERElO

Ry1CT1RUT006IDIwcHg7IFBBRERJTkctVE9QOiAyMHB4OyBQQURESU5HLUxFRlQ6IDIwcHg7IFBB

RERJTkctUklHSFQ6IDIwcHgiIGFsdD0iIiBzcmM9Imh0dHBzOi8vY3J5b25pa2ludmVzdG1lbnRz

LmNvbS9sYW5kaW5nL2ltYWdlcy9sb2dvL2xvZ28ucG5nIj48L1REPg0KPFREIHN0eWxlPSJURVhU

LUFMSUdOOiByaWdodDsgUEFERElORy1MRUZUOiA1MHB4OyBQQURESU5HLVJJR0hUOiAyMHB4Ij48

QSBzdHlsZT0iRk9OVC1TSVpFOiAxNHB4OyBURVhULURFQ09SQVRJT046IHVuZGVybGluZTsgQ09M

T1I6ICMyNjFkMWQ7IExFVFRFUi1TUEFDSU5HOiAxcHgiIGhyZWY9Imh0dHBzOi8vdTI4MDY2NTA2

LmN0LnNlbmRncmlkLm5ldC9scy9jbGljaz91cG49cS0yRkdrYXo5aEFraC0yQktkZGNzRWx3cjBn

ejZWVkcxNzJSRFNyV3lEcVJvNXdsd045WUUyc3lMekVGSHA2M1hSSnY4U3FYX2F1OEtob0FSVTBw

SFpzVkZ4cmlYa0VUSHZhcTNxMFduRkh1Rkd4dVhnOS0yQlRTSUJ0ZFJ5VmlnRnQ1VWdZeGtkYWJL

OVhSSEZpZjhCOTl3aFpNMC0yRkNVb041T2hDdldXcElVaXJheDNxUFo0T01acFVDR2FmMjhsN0I2

UTZyUWVzcm1GU0FULTJGb1RxTkM3eWQtMkJteTMzUzd0RXFJdkMzenE4Ukw0bm1VQlFJcm12RWZI

d2djcXliVWdBUFRXMS0yQkhiYnpIbXNVUEFGWnkzLTJGRkVKVGotMkJsOTZFQS0zRC0zRCI+SW52

ZXN0bWVudCBQbGFuczwvQT48QSBzdHlsZT0iRk9OVC1TSVpFOiAxNHB4OyBURVhULURFQ09SQVRJ

T046IHVuZGVybGluZTsgQ09MT1I6ICM3YzIxMjE7IE1BUkdJTi1MRUZUOiAyMHB4OyBMRVRURVIt

U1BBQ0lORzogMXB4IiBocmVmPSJodHRwczovL3UyODA2NjUwNi5jdC5zZW5kZ3JpZC5uZXQvbHMv

Y2xpY2s/dXBuPXEtMkZHa2F6OWhBa2gtMkJLZGRjc0Vsd3IwZ3o2VlZHMTcyUkRTcld5RHFSbzV4

LTJGakNVYzNDYmZXWUhLbmNqdWU5UHZLZzRrbE9kSjhVajUtMkZ1V2FMekdQbEEtM0QtM0RiNGhN

X2F1OEtob0FSVTBwSFpzVkZ4cmlYa0VUSHZhcTNxMFduRkh1Rkd4dVhnOS0yQlRTSUJ0ZFJ5Vmln

RnQ1VWdZeGtkYUZDRjBKTzRNWTdiTEoycWlZTERoMi0yRkpYc0tzWVpUODNiYW5tcGl0OXA1UDgz

NmYwVy0yRjduVHNWZWx1TE5tOUhvdjBmbGI1ME9qVnJibkNIanF0dVQ1VmEwY0VJQ1ZSSnQ1d0Ex

NVJ1TUJFWG1YOFZFTUFPbU9IMS0yRnlTaDlPUEoyTzVJZzc0dFQ1RGdKMUgxdlotMkZhVTF3LTNE

LTNEIj5SZWdpc3RlcjwvQT48L1REPjwvVFI+PC9UQk9EWT48L1RBQkxFPg0KPERJViBzdHlsZT0i

Qk9SREVSLVRPUDogMXB4IHNvbGlkOyBQQURESU5HLUJPVFRPTTogNjBweDsgUEFERElORy1UT1A6

IDYwcHg7IFBBRERJTkctTEVGVDogNzBweDsgUEFERElORy1SSUdIVDogNzBweCI+DQo8SDEgc3R5

bGU9Ik1BUkdJTi1UT1A6IDBweCI+SGV5IHRoZXJlLDwvSDE+DQo8RElWIHN0eWxlPSJGT05ULVNJ

WkU6IDE0cHg7IENPTE9SOiAjNjM2MzYzIj4NCjxQPllvdSd2ZSBiZWVuIHRoaW5raW5nIGFib3V0

IGl0LCBub3cgaXQncyB0aW1lIHRvIHRha2UgYWN0aW9uISBXZSdyZSBvZmZlcmluZyB5b3UgYW4g

b3Bwb3J0dW5pdHkgdG8gaW52ZXN0IGluIHRoZSBjcnlwdG8gbWFya2V0IGFzIGl0IHN0YWJpbGl6

ZXMuIEludmVzdCB3aXRoIENyeW9uaWsgSW52ZXN0bWVudHMgYW5kIGVuam95IHRoZSBncm93aW5n

IGVhcm5pbmdzLiBDcnlvbmlrIEludmVzdG1lbnRzIGlzIGEgcmVnaXN0ZXJlZCBVSyBpbnZlc3Rt

ZW50IGNvbXBhbnksIGFuZCBpcyBsaXN0ZWQgb24gdGhlIFVLIGNvbXBhbnkgaG91c2UuIDwvUD4N

CjxQPjxTVFJPTkc+UGxhbnM6IDwvU1RST05HPkNyeW9uaWssIEJhc2ljLCBCbHVlICZhbXA7IFZJ

UCBQbGFuczwvUD4NCjxQPjxTVFJPTkc+QW1vdW50OiA8L1NUUk9ORz4kMTAwLjAwKzwvUD4NCjxQ

PjxTVFJPTkc+RHVyYXRpb246IDwvU1RST05HPjMgLSAxMCBkYXlzPC9QPg0KPFA+PFNUUk9ORz5D

b21taXNzaW9uOiA8L1NUUk9ORz45IC0gNTAlPC9QPjwvRElWPg0KPEg0IHN0eWxlPSJNQVJHSU4t

Qk9UVE9NOiAxMHB4Ij5OZWVkIEhlbHA/PC9IND4NCjxESVYgc3R5bGU9IkZPTlQtU0laRTogMTJw

eDsgQ09MT1I6ICNhNWE1YTUiPg0KPFA+SWYgeW91IGhhdmUgYW55IHF1ZXN0aW9ucyB5b3UgY2Fu

IHNpbXBseSByZXBseSB0byB0aGlzIGVtYWlsIG9yIGZpbmQgb3VyIGNvbnRhY3QgaW5mb3JtYXRp

b24gYXQgPEEgc3R5bGU9IlRFWFQtREVDT1JBVElPTjogdW5kZXJsaW5lOyBDT0xPUjogIzRiNzJm

YSIgaHJlZj0iaHR0cHM6Ly91MjgwNjY1MDYuY3Quc2VuZGdyaWQubmV0L2xzL2NsaWNrP3Vwbj1x

LTJGR2thejloQWtoLTJCS2RkY3NFbHdyMGd6NlZWRzE3MlJEU3JXeURxUm81eEFhMkhFd3pFRHQt

MkJYMWZlUldGeXQzdHFRel9hdThLaG9BUlUwcEhac1ZGeHJpWGtFVEh2YXEzcTBXbkZIdUZHeHVY

ZzktMkJUU0lCdGRSeVZpZ0Z0NVVnWXhrZGFhY0pJbDlWNVpCRmNFSE5nMHFPSHg5OTVSLTJCaDY3

VnFibFU1OWkyVVlZQmJubmlDTTBROGJIVG9WU2k3YXQzVzlkOU51WmZVSU5YQlZxSUpyRlFqYmla

RmhUcWlEY2pYRlhxY25QNVBaVEk1LTJGWnp4U2xmNUFpSVhsV0k0NUdTSnRSN0NyLTJGelBHc0o3

T0JPVkxNcm9UR3ctM0QtM0QiPkNyeW9uaWsgSW52ZXN0bWVudHM8L0E+LiBBbHNvIGNvbnRhY3Qg

dXMgYXQgPEEgc3R5bGU9IlRFWFQtREVDT1JBVElPTjogdW5kZXJsaW5lOyBDT0xPUjogIzRiNzJm

YSIgaHJlZj0ibWFpbHRvOnN1cHBvcnRAY3J5b25pa2ludmVzdG1lbnRzLmNvbSI+c3VwcG9ydEBj

cnlvbmlraW52ZXN0bWVudHMuY29tPC9BPjwvUD48L0RJVj4NCjxESVYgc3R5bGU9IkZPTlQtU0la

RTogMTRweDsgTUFSR0lOLVRPUDogMzBweDsgQ09MT1I6ICM2MzYzNjMiPjxCUj48QlI+Q2hlZXJz

LCA8QlI+Q3J5b25payBJbnZlc3RtZW50cy4gPC9ESVY+PC9ESVY+PC9ESVY+PGltZyBzcmM9Imh0

dHBzOi8vdTI4MDY2NTA2LmN0LnNlbmRncmlkLm5ldC93Zi9vcGVuP3Vwbj1PdUpOODE3MXplei0y

RnVIbUZyYWdoN09qbkNpajFONVZ1elhBTzRsNEpRVGRBMENmRUdkSWhxbmhWZkliTGlGOERGQ1RB

MXU1TEhlSEwzc01MQXMtMkZmZGl6ZTRZVjVFbXZLeHV2NnBodk1JWmc3U041Z3lNVHhWN0hlTHpo

TnQzc0hWLTJGc3o0eHVCT3pseWpZMklDUk94R3ZJTkViamVLWkJJcm1hb2VhOFlraVpQZTVWMHM0

U1RyTkxBWTczekViekZ5aC0yQnpCUEM1R1E5SmQtMkYtMkZVOS0yQjFYS2ctM0QtM0QiIGFsdD0i

IiB3aWR0aD0iMSIgaGVpZ2h0PSIxIiBib3JkZXI9IjAiIHN0eWxlPSJoZWlnaHQ6MXB4ICFpbXBv

cnRhbnQ7d2lkdGg6MXB4ICFpbXBvcnRhbnQ7Ym9yZGVyLXdpZHRoOjAgIWltcG9ydGFudDttYXJn

aW4tdG9wOjAgIWltcG9ydGFudDttYXJnaW4tYm90dG9tOjAgIWltcG9ydGFudDttYXJnaW4tcmln

aHQ6MCAhaW1wb3J0YW50O21hcmdpbi1sZWZ0OjAgIWltcG9ydGFudDtwYWRkaW5nLXRvcDowICFp

bXBvcnRhbnQ7cGFkZGluZy1ib3R0b206MCAhaW1wb3J0YW50O3BhZGRpbmctcmlnaHQ6MCAhaW1w

b3J0YW50O3BhZGRpbmctbGVmdDowICFpbXBvcnRhbnQ7Ii8+PC9CT0RZPjwvSFRNTD4=



--31314614D56F4007B62BF19EE7430F47--

Business partner spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 23 Jul 2022 09:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oFHQ1-0007YY-5t

for dave@doctor.nl2k.ab.ca;

Sat, 23 Jul 2022 09:51:53 -0600

Resent-From: The Doctor

Resent-Date: Sat, 23 Jul 2022 09:51:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f66.google.com ([209.85.218.66]:45749)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oFHCA-0006NH-Vz

for doctor@netknow.ca;

Sat, 23 Jul 2022 09:37:38 -0600

Received: by mail-ej1-f66.google.com with SMTP id fy29so13197339ejc.12

for ; Sat, 23 Jul 2022 08:37:17 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=962rzl+hBh3xQcTFtjwtS144H/2npPM5VoLMiehPq7o=;

b=dSoqCwMZ8+llIkOMkXtigR0W6+TpUu3mYMo0xXkCetwO10u9IXJt4q9QBqsxjWyWTf

nqfb7INYwWicZ53cAibdxfrfEqZICzz5bp7+FpRVjitPUAYNusrWga7sHaE9gX0zajn0

rwV51Tb41VlzoFCYR6YDls43JNRv8iAqZmH1jW5HrvUv02ozh4B35yVGLtxqlWUQusVq

bX4ggmGVANwF9bG45Q7PgRIGCleDIBE6wjl7xR2OvDSb5ISOHxoZ9NAxDGteWfyN6Tv2

xb3rjHfucU6LOfaFDzpHQ4CcTkLkLTX2YQ0/kshcwasiX3vd3gHvvZHSenXksh7no6Rs

RTEA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=962rzl+hBh3xQcTFtjwtS144H/2npPM5VoLMiehPq7o=;

b=WKV+RPQR7b2UqyLjRljfYLnveiaMLPFa2hLpvczFOuPiieZhI85PdKLQsfhPOa7nSu

gbt+WW1kqW/BxBNRE8o8N2dQQ6jYn2cbC8Vo2xXSqdb9Njl+eCQ1b2nx3HJYlXhX5DCP

aygDO/orkk8R7BEQrTHA5uMXHk5iypfivT47m5lbwnq/UOA595M52JfX9G9wXzFpxYeS

wRGCetkGvusxjiQnldzORnRfAgx5w7f0F4bAU7yRKohcPmxarH1tz8E88uCBOenc/wLT

HzKYPbfUV32Kf32zN45JKU0Ei8QgyL6f7/b7MX2lYgm/kWl869DcM3LesNP3S2PAcjjW

902A==

X-Gm-Message-State: AJIora9wmX1L+gC91qMKARA3NZ1he2hGO45vKLu7Ku7G/nT15gpIk3BS

FA5t8pcO2DMq8XMrBBoOqKCeCJTzMkLieYRNyQc=

X-Google-Smtp-Source: AGRyM1tQqqA0Gr504y0l2xZrOOc/D7Nni7ueXWjErp6Jbi9G3lSeY1DYOniqFbkt89dDCuw6j/zz3er1fvA4aRPKqTU=

X-Received: by 2002:a17:906:118:b0:715:771b:251b with SMTP id

24-20020a170906011800b00715771b251bmr3708520eje.651.1658590630769; Sat, 23

Jul 2022 08:37:10 -0700 (PDT)

MIME-Version: 1.0

Reply-To: tonnyyrross@gmail.com

From: Manford Smith

Date: Sat, 23 Jul 2022 08:36:57 -0700

Message-ID:

Subject: BUSINESS IDEA

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000005ffc5905e47ab9b8"

Bcc: doctor@netknow.ca

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Dear. Nice to connect with you, I am contacting you to

assist me on a business project. Acknowledge my email then I will send you

a summary of this business opportunity that we can discuss in due course

if [...]



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.66 listed in wl.mailspike.net]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[manfords97[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[manfords97[at]gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} BUSINESS IDEA



--0000000000005ffc5905e47ab9b8

Content-Type: text/plain; charset="UTF-8"



--

Dear.



Nice to connect with you, I am contacting you to assist me on a business

project. Acknowledge my email then I will send you a summary of this

business opportunity that we can discuss in due course if you are

interested.



I apologize for any inconvenience this may have caused.



Sincerely,

Tony Ross

Executive Vice President & Chief Credit Officer, Woodforest National Bank,

Woodlands, Texas.



--0000000000005ffc5905e47ab9b8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





--

ata-smartmail=3D"gmail_signature">Dear.

Nice to connect with you, I =

am contacting you to assist me on a business project.=C2=A0 Acknowledge my =

email then I will send you a summary of this business opportunity that we c=

an discuss in due course if you are interested.

I apologize for any =

inconvenience this may have caused.

Sincerely,
Tony Ross
Execu=

tive Vice President & Chief Credit Officer, Woodforest National Bank, W=

oodlands, Texas.




--0000000000005ffc5905e47ab9b8--

Home Depot phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 23 Jul 2022 09:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oFHNk-0007M8-P0

for dave@doctor.nl2k.ab.ca;

Sat, 23 Jul 2022 09:49:32 -0600

Resent-From: The Doctor

Resent-Date: Sat, 23 Jul 2022 09:49:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.126.124.152] (port=45339 helo=ajtsd-adsh.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

id 1oFGcj-0000aK-6M

for doctor@doctor.nl2k.ab.ca;

Sat, 23 Jul 2022 09:01:01 -0600

From:_Reward On Hold! Please Confirm

Subject:_Don’t miss your chance to win a makita power drill

Date: Fri, 22 Jul 2022 23:37:18 +0200

To: doctor@doctor.nl2k.ab.ca

Reply-To: "Adobe Creative Cloud"

MIME-Version: 1.0

X-mailer: nlserver, Build 6.7.0

Message-ID:

X-250ok-CID: P26341-121020

TenantHeader: 1d0e6311-6f98-4c5b-8b0e-lONOZ2cm7K508KBN2njyoFx

Affinity: prod.default

X-cust_MessageID: 1938757681

X-cust_DeliveryID: 350826

X-cust_InstanceName: aci_prod

MessageMaxRetry:2

MessageRetryPeriod: 3600

MessageWebValidityDuration: 2592000

MessageValidityDuration: 432000

X-cust_IMSOrgID:

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"

X-Spam_score: 11.2

X-Spam_score_int: 112

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: SURVEY ABOUT: THE HOME DEPOT THE HOME DEPOT Please tell us

about your: THE HOME DEPOT Experiences and as a thank you, you can select

from several exclusive offer rewards! Supply is extremely limited so act

fast today!



Content analysis details: (11.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.8 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.1 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters

1.5 HDRS_MISSP Misspaced headers

0.1 SUBJECT_NEEDS_ENCODING Subject is encoded but does not specify

the encoding

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} _Don’t miss your chance to win a makita power drill