Link spam from Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 17 Aug 2022 11:26:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oOMni-000IzL-8L
for dave@doctor.nl2k.ab.ca;
Wed, 17 Aug 2022 11:25:54 -0600
Resent-From: The Doctor
Resent-Date: Wed, 17 Aug 2022 11:25:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-sl2kor01olkn0182.outbound.protection.outlook.com ([104.47.108.182]:39296 helo=KOR01-SL2-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oOLf8-000B8l-FZ
for doctor@doctor.nl2k.ab.ca;
Wed, 17 Aug 2022 10:13:05 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=RtM40+2Cs3tLxd18FSisj8GUBqaVVcP6eG+Mu8/Cb/79JaDYU+sXbzRR6e+jPN66KezUep7eTqMss6bqFuaOS7RU8Ag1MgZPHnNuTw8LZXOD9mQnHZ3coLvyO6c3wAjR4ud+n+KFnqNYgTlhGYafPRG7JUE6QX2rRQeSU8RRulnGqBEae2CtNReLUQcQXr6t6vaj0a1vkdWBtdT8VNnBXiBC1LRo10VvKgWDbob6DoP7yROt9OhLoF6oF4vdZuoVd1e7bW+mSbn4IoUJlEPAYVw04x8Wx0g3yMi0JIBSbZR/nuaz5G5gq3PQOlZuc1V/MT8J53nKA4CB7QWcV6byxw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=yNg2w9O2XwPWOUQpCPyLOIRTFZ6n3Wcd0Idmej7SPCw=;
b=SolV4u3RiOXOAP4gStNNYo9eKBdsnUYlTBQ+z4jChw1eIQtxIr+HGDiD/PDTH9gQodUqYrLDzSdP+hrfJuoFpl5q1s9cEWAuYnwK3OM3Q02GkM2tLiNlwnJcsVdZy1aM2jOLXkCTRjyFhD/nB6Fiq2P2Ox1e7K0t8KxTy5Z39ynp8PAMprloyr8jTNNEoIwDrkiR7Xcsf0tZMF6yM84onlnmJjbQqYZpCF+a8ReUwysCL5SXpUpcKPvMuczQ8TGnk3thzGEoUUX+mVMRBkLo1YWDYLzEKJwmeEjn9ikXOnu4Mn1qSuC260E0Arud3erMBRlB6DGtde72mK9MQu5MMA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=yNg2w9O2XwPWOUQpCPyLOIRTFZ6n3Wcd0Idmej7SPCw=;
b=TKBm4+5s8qZhvJUzr2H8tMB8OmV9drM0pSkINcMW/JmUVHcnsK39OguYiiFz6TFKMpTDx3smp711wCoV5Hd7255RxkmEIP0ANBwzQLq+3SeG6PZyxlOrojGPVp10xCwlYvJZADPLdqtmbkrANjuPVG1ekBLdfXS1JorT0ovQGp8QluTf9dFadhRl6zZsFeGlbxzqWJYa6mINXpJ84KlyIueaZmUCSReWbZcvsms3VP/rdFnGwzd4tSxYqpxI9QYGWHBgCbSARJabE6hLgMS0lo0HN2MyNdqkX36xuRe9vGfHj4G32kN0f4jVNUljHS3XANfty62XbEwsNAb3/hIkYw==
Received: from SL2P216MB0010.KORP216.PROD.OUTLOOK.COM (2603:1096:100:1b::8) by
PS2P216MB0018.KORP216.PROD.OUTLOOK.COM (2603:1096:300:21::16) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.5504.16; Wed, 17 Aug 2022 16:12:25 +0000
Received: from SL2P216MB0010.KORP216.PROD.OUTLOOK.COM
([fe80::9c05:9fb7:b62d:cd48]) by SL2P216MB0010.KORP216.PROD.OUTLOOK.COM
([fe80::9c05:9fb7:b62d:cd48%8]) with mapi id 15.20.5504.027; Wed, 17 Aug 2022
16:12:25 +0000
From: "Fatima Ahmed"
Subject: =?UTF-8?Q?=EF=BB=BF?=
To: "doctor",
"doctorelefant",
"doctorwho",
"doctor spank",
"doctor who"
Message-ID:
Date: Wed, 17 Aug 2022 07:14:15 -0900
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: Base64
X-TMN: [oUYKkYJ1zb4Pv3qlqZUBscXAY74uEP0h]
X-ClientProxiedBy: TYCPR01CA0186.jpnprd01.prod.outlook.com
(2603:1096:400:2b0::9) To SL2P216MB0010.KORP216.PROD.OUTLOOK.COM
(2603:1096:100:1b::8)
X-Microsoft-Original-Message-ID:
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 5bb33153-47a3-4df0-5675-08da806b4560
X-MS-TrafficTypeDiagnostic: PS2P216MB0018:EE_
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
f7WHJ4mqXI+Fheta+YRqJauSAwotsxCS/6JZx5KdwoRQfvGWByZm0jqyeNqId6gmf+2EoO7t5g7z9peJIjUltN2DAVCrYtANIBLcQ9kcYWc2NAuZnl5Brnfg4iwvGfkQDfx0dnfSEfEedN2y27qXzfV/Vvca/VC2cZT2k5yBIcLvendMT3WNMOprfGXKrsZ1h95sqOB7O5smjq1rrPPYdRNcUG/404id15m++CvhW5mjAp17Cd3njwATDSnzGQZSl97U9eItaImbOf0dFW+QNEF0SlaRqKK6eTncc+rS9zjGka+E62dhwJ5Hi0eQUjLRZPghKGkkHYW5ZGEdC1WAhW0L2i9VpEfLcYQg959qs8o=
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
=?utf-8?B?WVdIRmVWMFFCMDM0bHJKNElxeFN2QjBBOEFEdEZHWnMwQ3RaZjg4TjlBZXMr?=
=?utf-8?B?V1p3ZDhpcVZ2b2E0a3VnNG5WTnB3R3J2NFFHSWJXckorMG5udkdQN3B1VDJu?=
=?utf-8?B?bTBjU0FjT0lVT2xyazUyaHNlcnQ3Y3VUZG5DaG54ZGhqa2xYaUxTQk5MMWFJ?=
=?utf-8?B?eDFTT0t2dDFtOUpvN0ZSck9kdTRQN2dlbG1haVJZL2ZKdjRtelpxM1VHSUNu?=
=?utf-8?B?K2NxUW92R09GazNnK1FUVlhnWEk2eXIrREptcTNmaENFVkc2TFhmb3psb3RF?=
=?utf-8?B?d0FKbGtLbVdiblVDNGhabm5xUVVvZSt3T0tLbUFnL1YrZkJNV3pWU09Pc3Qw?=
=?utf-8?B?VEpmUWl1RDBrcEgwYitkbEJldmF2cHNWTVpGbWptLy95c0l4Rm10UzhuK05y?=
=?utf-8?B?L3RTcDdMUDh3dUVmV21Vd1VKaE9MTUNyVUV0T1hlRFQvVTRsaVM2NHpCYi9t?=
=?utf-8?B?eFM2T3ZTS1hjNDVLeUlkUWRqOHptaDZGc25VWDZKZ0h6YnBueHErcGlMTSta?=
=?utf-8?B?NXVZc1dPM0VNTTYvbUFEeTk5cGQ2VDNBSkpGVndEb04vWEpTcW90azJtZ2Q3?=
=?utf-8?B?YnpWZGdhQTdlVjVUTzhYYUg1bHU3MUx2enlRblFMTDhTek1pWjFhY01nQW9O?=
=?utf-8?B?Yk1jNnRENzBCR1FyMWV0MmhhWXM4RlBkVWhDWXEvSGRESFBHZ2lVL2ZweU9o?=
=?utf-8?B?bTVDZEdGRnBwOEpqMVl1NmtzalE3MFUvdWZPMG5hbWNiUUdDRXAxMjlpWmdR?=
=?utf-8?B?cWMzN1N2ajN3aDFZaEFxdGY1a1cwdllOTm00MmtNSFB0TXN0QXUrYXg5V1kv?=
=?utf-8?B?VGZCdm1yM0dVRFlid09XbXRHajU4bThQdTB4dlhET3ZheURhTWJlK1pZTTdp?=
=?utf-8?B?ZE0yakJLKzJWcVEvVjlETFVlaTNDNUgvSkRBSmdXYU5EMHJhUytOZkJBSWhD?=
=?utf-8?B?QzdsYU1Dbkl0NlNzMDM5OUgvM3dJMVdGQmxDdUpzVUs3b1llMU5CWGVCY1By?=
=?utf-8?B?bEI3cUJqemtsWmJxVUtXVkdmRnJKQzAxWDA0T1A2UkU4V0hoUTdUSXl6eEp0?=
=?utf-8?B?a056bFNTN3hHSnFtcElDU1ErVHlQN1RIRnFNZTFncjVBNW52VTJWVFF1SmtF?=
=?utf-8?B?WDhPYW93MU5ONi9BL2Z2dnJlU1NKdi9ibjI0azZRams4QWNiQVU1UjJoalZB?=
=?utf-8?B?d2VQYUpoYzF4OVo0d0RzQi9RaUhKd3NINEx5ejdzeTBTUTg4TUFQcEJORmxM?=
=?utf-8?B?UWJjaG5vVUFGdWp4TGNPZXJJcWNOd0I5L3p1b1FxQVU2OUFBZS9SL2l1enBn?=
=?utf-8?B?b3JCWjlLL0lGUFpVc29RV0pmejJrZk1KVEVpUjhrcGJZNWRZMGFram9iZThX?=
=?utf-8?B?NEFxeThhMThtMHJ3cGNCa1JhRGVFSHZhS3lqZSs4L2tFdi9RQnVyN1c1alJT?=
=?utf-8?B?cUlGVnV4WmN4K2ZiLzZrbFIxWFZEOFVPbS9qUVdGQWRUbVFqTGVmS3ZranJT?=
=?utf-8?B?UDNEWGtiRklkUnBNQTNjV2ZIbUtMakhycHo1bzdKU0htakYzOVRQdlNsNStF?=
=?utf-8?B?aXQ3NEpDQ0lOWjlCMzMvcHVOMzF0by9tKzlQenVJay9BOFVwcTYrajBxZHVv?=
=?utf-8?B?YkphdkZNVHhueWszbktQQVAzOEprYmhaMkIzNU02TkRYVE5OaHRuNXZMeFJa?=
=?utf-8?B?SyszSmhNUy83R2pnbEhiLzRTMEpabnZuOFc3WFBFZ0VBd0VoSnZQeTdaM3cz?=
=?utf-8?Q?1pxAPSlZINm3J9MZJg=3D?=
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 5bb33153-47a3-4df0-5675-08da806b4560
X-MS-Exchange-CrossTenant-AuthSource: SL2P216MB0010.KORP216.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Aug 2022 16:12:25.4986
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PS2P216MB0018
X-Spam_score: 5.8
X-Spam_score_int: 58
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://1drv.ms/w/s!AlRAfLy6AqyPgRQDPiCnPyY2RBVC
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: 1drv.ms]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[seigelgrayson1992[at]outlook.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[seigelgrayson1992[at]outlook.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
1.3 SCC_BODY_URI_ONLY No description available.
0.0 SCC_BODY_SINGLE_WORD No description available.
0.0 BODY_SINGLE_WORD Message body is only one word (no spaces)
0.0 BODY_SINGLE_URI Message body is only a URI
Subject: {SPAM?} =?UTF-8?Q?=EF=BB=BF?=
PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz
ZXQ9dXRmLTgiPjxhIGhyZWY9Imh0dHBzOi8vMWRydi5tcy93L3MhQWxSQWZMeTZBcXlQZ1JRRFBp
Q25QeVkyUkJWQyI+aHR0cHM6Ly8xZHJ2Lm1zL3cvcyFBbFJBZkx5NkFxeVBnUlFEUGlDblB5WTJS
QlZDPC9hPg0K
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 17 Aug 2022 11:26:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oOMni-000IzL-8L
for dave@doctor.nl2k.ab.ca;
Wed, 17 Aug 2022 11:25:54 -0600
Resent-From: The Doctor
Resent-Date: Wed, 17 Aug 2022 11:25:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-sl2kor01olkn0182.outbound.protection.outlook.com ([104.47.108.182]:39296 helo=KOR01-SL2-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oOLf8-000B8l-FZ
for doctor@doctor.nl2k.ab.ca;
Wed, 17 Aug 2022 10:13:05 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=RtM40+2Cs3tLxd18FSisj8GUBqaVVcP6eG+Mu8/Cb/79JaDYU+sXbzRR6e+jPN66KezUep7eTqMss6bqFuaOS7RU8Ag1MgZPHnNuTw8LZXOD9mQnHZ3coLvyO6c3wAjR4ud+n+KFnqNYgTlhGYafPRG7JUE6QX2rRQeSU8RRulnGqBEae2CtNReLUQcQXr6t6vaj0a1vkdWBtdT8VNnBXiBC1LRo10VvKgWDbob6DoP7yROt9OhLoF6oF4vdZuoVd1e7bW+mSbn4IoUJlEPAYVw04x8Wx0g3yMi0JIBSbZR/nuaz5G5gq3PQOlZuc1V/MT8J53nKA4CB7QWcV6byxw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=yNg2w9O2XwPWOUQpCPyLOIRTFZ6n3Wcd0Idmej7SPCw=;
b=SolV4u3RiOXOAP4gStNNYo9eKBdsnUYlTBQ+z4jChw1eIQtxIr+HGDiD/PDTH9gQodUqYrLDzSdP+hrfJuoFpl5q1s9cEWAuYnwK3OM3Q02GkM2tLiNlwnJcsVdZy1aM2jOLXkCTRjyFhD/nB6Fiq2P2Ox1e7K0t8KxTy5Z39ynp8PAMprloyr8jTNNEoIwDrkiR7Xcsf0tZMF6yM84onlnmJjbQqYZpCF+a8ReUwysCL5SXpUpcKPvMuczQ8TGnk3thzGEoUUX+mVMRBkLo1YWDYLzEKJwmeEjn9ikXOnu4Mn1qSuC260E0Arud3erMBRlB6DGtde72mK9MQu5MMA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=yNg2w9O2XwPWOUQpCPyLOIRTFZ6n3Wcd0Idmej7SPCw=;
b=TKBm4+5s8qZhvJUzr2H8tMB8OmV9drM0pSkINcMW/JmUVHcnsK39OguYiiFz6TFKMpTDx3smp711wCoV5Hd7255RxkmEIP0ANBwzQLq+3SeG6PZyxlOrojGPVp10xCwlYvJZADPLdqtmbkrANjuPVG1ekBLdfXS1JorT0ovQGp8QluTf9dFadhRl6zZsFeGlbxzqWJYa6mINXpJ84KlyIueaZmUCSReWbZcvsms3VP/rdFnGwzd4tSxYqpxI9QYGWHBgCbSARJabE6hLgMS0lo0HN2MyNdqkX36xuRe9vGfHj4G32kN0f4jVNUljHS3XANfty62XbEwsNAb3/hIkYw==
Received: from SL2P216MB0010.KORP216.PROD.OUTLOOK.COM (2603:1096:100:1b::8) by
PS2P216MB0018.KORP216.PROD.OUTLOOK.COM (2603:1096:300:21::16) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.5504.16; Wed, 17 Aug 2022 16:12:25 +0000
Received: from SL2P216MB0010.KORP216.PROD.OUTLOOK.COM
([fe80::9c05:9fb7:b62d:cd48]) by SL2P216MB0010.KORP216.PROD.OUTLOOK.COM
([fe80::9c05:9fb7:b62d:cd48%8]) with mapi id 15.20.5504.027; Wed, 17 Aug 2022
16:12:25 +0000
From: "Fatima Ahmed"
Subject: =?UTF-8?Q?=EF=BB=BF?=
To: "doctor"
"doctorelefant"
"doctorwho"
"doctor spank"
"doctor who"
Message-ID:
Date: Wed, 17 Aug 2022 07:14:15 -0900
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: Base64
X-TMN: [oUYKkYJ1zb4Pv3qlqZUBscXAY74uEP0h]
X-ClientProxiedBy: TYCPR01CA0186.jpnprd01.prod.outlook.com
(2603:1096:400:2b0::9) To SL2P216MB0010.KORP216.PROD.OUTLOOK.COM
(2603:1096:100:1b::8)
X-Microsoft-Original-Message-ID:
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 5bb33153-47a3-4df0-5675-08da806b4560
X-MS-TrafficTypeDiagnostic: PS2P216MB0018:EE_
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
f7WHJ4mqXI+Fheta+YRqJauSAwotsxCS/6JZx5KdwoRQfvGWByZm0jqyeNqId6gmf+2EoO7t5g7z9peJIjUltN2DAVCrYtANIBLcQ9kcYWc2NAuZnl5Brnfg4iwvGfkQDfx0dnfSEfEedN2y27qXzfV/Vvca/VC2cZT2k5yBIcLvendMT3WNMOprfGXKrsZ1h95sqOB7O5smjq1rrPPYdRNcUG/404id15m++CvhW5mjAp17Cd3njwATDSnzGQZSl97U9eItaImbOf0dFW+QNEF0SlaRqKK6eTncc+rS9zjGka+E62dhwJ5Hi0eQUjLRZPghKGkkHYW5ZGEdC1WAhW0L2i9VpEfLcYQg959qs8o=
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
=?utf-8?B?WVdIRmVWMFFCMDM0bHJKNElxeFN2QjBBOEFEdEZHWnMwQ3RaZjg4TjlBZXMr?=
=?utf-8?B?V1p3ZDhpcVZ2b2E0a3VnNG5WTnB3R3J2NFFHSWJXckorMG5udkdQN3B1VDJu?=
=?utf-8?B?bTBjU0FjT0lVT2xyazUyaHNlcnQ3Y3VUZG5DaG54ZGhqa2xYaUxTQk5MMWFJ?=
=?utf-8?B?eDFTT0t2dDFtOUpvN0ZSck9kdTRQN2dlbG1haVJZL2ZKdjRtelpxM1VHSUNu?=
=?utf-8?B?K2NxUW92R09GazNnK1FUVlhnWEk2eXIrREptcTNmaENFVkc2TFhmb3psb3RF?=
=?utf-8?B?d0FKbGtLbVdiblVDNGhabm5xUVVvZSt3T0tLbUFnL1YrZkJNV3pWU09Pc3Qw?=
=?utf-8?B?VEpmUWl1RDBrcEgwYitkbEJldmF2cHNWTVpGbWptLy95c0l4Rm10UzhuK05y?=
=?utf-8?B?L3RTcDdMUDh3dUVmV21Vd1VKaE9MTUNyVUV0T1hlRFQvVTRsaVM2NHpCYi9t?=
=?utf-8?B?eFM2T3ZTS1hjNDVLeUlkUWRqOHptaDZGc25VWDZKZ0h6YnBueHErcGlMTSta?=
=?utf-8?B?NXVZc1dPM0VNTTYvbUFEeTk5cGQ2VDNBSkpGVndEb04vWEpTcW90azJtZ2Q3?=
=?utf-8?B?YnpWZGdhQTdlVjVUTzhYYUg1bHU3MUx2enlRblFMTDhTek1pWjFhY01nQW9O?=
=?utf-8?B?Yk1jNnRENzBCR1FyMWV0MmhhWXM4RlBkVWhDWXEvSGRESFBHZ2lVL2ZweU9o?=
=?utf-8?B?bTVDZEdGRnBwOEpqMVl1NmtzalE3MFUvdWZPMG5hbWNiUUdDRXAxMjlpWmdR?=
=?utf-8?B?cWMzN1N2ajN3aDFZaEFxdGY1a1cwdllOTm00MmtNSFB0TXN0QXUrYXg5V1kv?=
=?utf-8?B?VGZCdm1yM0dVRFlid09XbXRHajU4bThQdTB4dlhET3ZheURhTWJlK1pZTTdp?=
=?utf-8?B?ZE0yakJLKzJWcVEvVjlETFVlaTNDNUgvSkRBSmdXYU5EMHJhUytOZkJBSWhD?=
=?utf-8?B?QzdsYU1Dbkl0NlNzMDM5OUgvM3dJMVdGQmxDdUpzVUs3b1llMU5CWGVCY1By?=
=?utf-8?B?bEI3cUJqemtsWmJxVUtXVkdmRnJKQzAxWDA0T1A2UkU4V0hoUTdUSXl6eEp0?=
=?utf-8?B?a056bFNTN3hHSnFtcElDU1ErVHlQN1RIRnFNZTFncjVBNW52VTJWVFF1SmtF?=
=?utf-8?B?WDhPYW93MU5ONi9BL2Z2dnJlU1NKdi9ibjI0azZRams4QWNiQVU1UjJoalZB?=
=?utf-8?B?d2VQYUpoYzF4OVo0d0RzQi9RaUhKd3NINEx5ejdzeTBTUTg4TUFQcEJORmxM?=
=?utf-8?B?UWJjaG5vVUFGdWp4TGNPZXJJcWNOd0I5L3p1b1FxQVU2OUFBZS9SL2l1enBn?=
=?utf-8?B?b3JCWjlLL0lGUFpVc29RV0pmejJrZk1KVEVpUjhrcGJZNWRZMGFram9iZThX?=
=?utf-8?B?NEFxeThhMThtMHJ3cGNCa1JhRGVFSHZhS3lqZSs4L2tFdi9RQnVyN1c1alJT?=
=?utf-8?B?cUlGVnV4WmN4K2ZiLzZrbFIxWFZEOFVPbS9qUVdGQWRUbVFqTGVmS3ZranJT?=
=?utf-8?B?UDNEWGtiRklkUnBNQTNjV2ZIbUtMakhycHo1bzdKU0htakYzOVRQdlNsNStF?=
=?utf-8?B?aXQ3NEpDQ0lOWjlCMzMvcHVOMzF0by9tKzlQenVJay9BOFVwcTYrajBxZHVv?=
=?utf-8?B?YkphdkZNVHhueWszbktQQVAzOEprYmhaMkIzNU02TkRYVE5OaHRuNXZMeFJa?=
=?utf-8?B?SyszSmhNUy83R2pnbEhiLzRTMEpabnZuOFc3WFBFZ0VBd0VoSnZQeTdaM3cz?=
=?utf-8?Q?1pxAPSlZINm3J9MZJg=3D?=
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 5bb33153-47a3-4df0-5675-08da806b4560
X-MS-Exchange-CrossTenant-AuthSource: SL2P216MB0010.KORP216.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Aug 2022 16:12:25.4986
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PS2P216MB0018
X-Spam_score: 5.8
X-Spam_score_int: 58
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://1drv.ms/w/s!AlRAfLy6AqyPgRQDPiCnPyY2RBVC
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: 1drv.ms]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[seigelgrayson1992[at]outlook.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[seigelgrayson1992[at]outlook.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
1.3 SCC_BODY_URI_ONLY No description available.
0.0 SCC_BODY_SINGLE_WORD No description available.
0.0 BODY_SINGLE_WORD Message body is only one word (no spaces)
0.0 BODY_SINGLE_URI Message body is only a URI
Subject: {SPAM?} =?UTF-8?Q?=EF=BB=BF?=
PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz
ZXQ9dXRmLTgiPjxhIGhyZWY9Imh0dHBzOi8vMWRydi5tcy93L3MhQWxSQWZMeTZBcXlQZ1JRRFBp
Q25QeVkyUkJWQyI+aHR0cHM6Ly8xZHJ2Lm1zL3cvcyFBbFJBZkx5NkFxeVBnUlFEUGlDblB5WTJS
QlZDPC9hPg0K