Reward spam from Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 09 Oct 2022 14:12:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1ohc7m-000HlT-2P
for dave@doctor.nl2k.ab.ca;
Sun, 09 Oct 2022 13:38:10 -0600
Resent-From: The Doctor
Resent-Date: Sun, 9 Oct 2022 13:38:10 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-sgaapc01hn2241.outbound.protection.outlook.com ([52.100.164.241]:36619 helo=APC01-SG2-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1ohVJj-000Pzg-FF
for doctor@netknow.ca;
Sun, 09 Oct 2022 06:22:09 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=WrmhSv9NVDPv8g+wyhp0fhGAbhxtP0f2VaFLJ2lRDSiWgJ+FLvYv7OJ1+b6MvkWLtRCuYDStYnAXWUkpkXO0pTh0RacYPAL5kiWeAi2yOo4E4pRSkj5Ka8BePnY6TWLkTPQaCgnNnxPV5Cjdrr5A1wVeXZ60mavjEPB6brTiiKknLbqV0wqrK8fjJolqtGoEYNzkysH0PNm7l/fOYQzi0JgYUzS9+OX4QEI52xhtlRfdiwzsbkeRjlaBaeEA431cSEowIW5AEQDVoLf/if4NzUfAbCgi9UXxKnUoQI+ylY8Miw9nX1jgZddLFqS5RX1M/LVrWUeJ8Go969aV70DsUg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=AVRzxnp1Lr5V4ZVZiUoB8lszQv9GLWaX6FuYe4r4Org=;
b=SG4O8QEf0xPKog3JKpUg4zC4X86MUTOh0FIuo0tRIXbt6ts0J1cwZVpKCm0r0fXXshmxF3xn1kiZ7TCPZv6TzI9LzHMCR53L0RpV7VCSE7j2G2jisuKv0U+CN4c3z74a/tjQjzoyWxR54ito4KFt+tZ8S/WnOL83+2+W5Uhl2uGItBNOOiqGWzlHqWdPb6HeP6t+1gDeqpY2eynlNCCpHlMIfHwNHZn2CAOvCGYvfBIi0GfIvfW45hdnXgy2LXio86YQ4tVV7btlWZ1B8lZlB8NzekP3OXn7lO//gYhuaF55m8AIhLGZncK44rpxfMkWi4DT7lu/2zMOP9BoupMhqw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is
135.181.210.111) smtp.rcpttodomain=netknow.ca
smtp.mailfrom=mustedumn.onmicrosoft.com; dmarc=none action=none
header.from=pvxjwuuhbjytrwlhbbcetls.com; dkim=none (message not signed);
arc=none
Received: from SG2PR06CA0207.apcprd06.prod.outlook.com (2603:1096:4:68::15) by
TYZPR06MB6213.apcprd06.prod.outlook.com (2603:1096:400:33f::14) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5676.31; Sun, 9 Oct
2022 12:20:35 +0000
Received: from SG2APC01FT0064.eop-APC01.prod.protection.outlook.com
(2603:1096:4:68:cafe::4a) by SG2PR06CA0207.outlook.office365.com
(2603:1096:4:68::15) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5676.17 via Frontend
Transport; Sun, 9 Oct 2022 12:20:35 +0000
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 135.181.210.111)
smtp.mailfrom=mustedumn.onmicrosoft.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=pvxjwuuhbjytrwlhbbcetls.com;
Received-SPF: Fail (protection.outlook.com: domain of
mustedumn.onmicrosoft.com does not designate 135.181.210.111 as permitted
sender) receiver=protection.outlook.com; client-ip=135.181.210.111;
helo=mustedumn.onmicrosoft.com;
Received: from mustedumn.onmicrosoft.com (135.181.210.111) by
SG2APC01FT0064.mail.protection.outlook.com (10.13.36.172) with Microsoft SMTP
Server id 15.20.5709.10 via Frontend Transport; Sun, 9 Oct 2022 12:20:34
+0000
To: doctor@netknow.ca
MIME-Version: 1.0
Date: Sun, 09 Oct 2022 07:40:09 +0000
From: "ð“ð¡ðšð§ð¤ ð²ð¨ð®! ð’ð¡ðžð¥ð¥"
Reply_To: "Welcome C"
Subject: $ðŸ·ðŸ¶ðŸ¶ ð‘†â„Žð‘’ð‘™ð‘™ ð‘…ð‘’ð‘¤ð‘Žð‘Ÿð‘‘. ð‘ƒð‘Žð‘Ÿð‘¡ð‘–ð‘ð‘–ð‘ð‘Žð‘¡ð‘–ð‘œð‘› ð‘…ð‘’ð‘žð‘¢ð‘–ð‘Ÿð‘’ð‘‘#417
Content-Type: text/html; boundary="1901598-1-b595a9ac7cbe770ae255b23c76163168"
Feedback-ID: 325-anexp#nret-fa:account-notifier
Message-ID: <01073371717827176383039d9ee-c69a3509-5c85-481d-822e-ba65c204e1ba-000000@eu-central-1.amazonses.com>
X-SES-Outgoing: 2022.04.16-69.169.228.231
X-EOPAttributedMessage: 1
X-MS-Office365-Filtering-Correlation-Id: 1325517e-f8f9-4a84-e097-08daa9f0aa9f
X-MS-TrafficTypeDiagnostic:
CWLP265MB2098:EE_|SG2APC01FT0064:EE_|TYZPR06MB6213:EE_
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original:
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
X-Forefront-Antispam-Report-Untrusted:
CIP:103.143.76.15;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:confront.whitefov.live;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230016)(376002)(346002)(34096005)(396003)(136003)(39830400003)(46966006)(8676002)(5660300002)(40480700001)(7116003)(2876002)(6916009)(42186006)(316002)(70206006)(30864003)(2906002)(82310400005)(8936002)(70586007)(9686003)(498600001)(33964004)(26005)(71280400001)(41300700001)(3480700007)(66574015)(47076005)(35950700001)(83380400001)(336012)(42882007)(78352004)(18074004)(40580700002)(81166007)(166002)(21314003);DIR:OUT;SFP:1102;
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CWLP265MB2098
X-MS-Exchange-Transport-CrossTenantHeadersStripped:
SG2APC01FT0064.eop-APC01.prod.protection.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs:
d9bdec59-9b57-496b-c94b-08da884d2b6a
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?us-ascii?Q?mUur52pSVIidU9stwYymXUiupkiXzCGIu0Silp1WipJSGx8kB+ZYSkGVAe+F?=
=?us-ascii?Q?jcLRaQpfWc7sZuUeDq33W7SeYRoFgGCkfoCE5brDsePm+24fLOxTavVw8UgH?=
=?us-ascii?Q?ngNfuJzywxMYg2v+O8Ej59Sckj9+YkkVZdeg3zjRfv7caP6vpcWdbQzskLsa?=
=?us-ascii?Q?PEBjTvpLlWWvlFFghjwYogmUGZL8lkWGfo1vwSKppOZVI0L26rmrzMgpsRRX?=
=?us-ascii?Q?ByjdM0GRzPnAB7V1x7fnO0tJhtq4wcpxCvEh35jF5z4u2bYa18eBX6fn9YZ3?=
=?us-ascii?Q?iVa2qkYJF/q/IPAOZJAAWLG6yeMQSSSeirJlf93Ely4Q/p3qJF+uPsvnmJ91?=
=?us-ascii?Q?W2Z85H4n1rHQ7wt2tqGy9hylYrslsw09Wxgx50ZV2dlvF8Vcl/ysg+fC0lNF?=
=?us-ascii?Q?9eKc7H2VRhmEDfdILihZUpwK8KivTq+gTWS3TQ7RIcTq/4Bb+E+t2mr1ztPz?=
=?us-ascii?Q?7+cWRDPAkfLEqpG1d1GQkb1oSgIXQBFgfpM35smwdPh5q0NyC+Jw6vgNoixi?=
=?us-ascii?Q?TkszwsjFFurrMs1BZnmOVw1IMHGFEy+aKuhqrGG/FlXiAdMKX6V3fHgNZzPw?=
=?us-ascii?Q?F9zvXpaNe2zRq9zFRtEIa81V2PFhIzTi8gxIJ3vqYvs6gSKxZuBLoyMHVDBL?=
=?us-ascii?Q?cLBeLiHrE+pTcPubue9JudJpnIPHHTO8+H/y9E5MT+sNjuMRgQIyHMVCQWJ6?=
=?us-ascii?Q?+9II6/kIqaUNYwwpfuh4P40LGR8+oholzRw1qlgEViOcMzCdT0c9+TqcsVHD?=
=?us-ascii?Q?BPXT5b6o5EsTnqBHRNRNyxAAyno87lJsdU4ZZKsY58Hf3G7ThRtNBFN2Nmtf?=
=?us-ascii?Q?TwqCsGVQLzjqjIo//P27gT4wLhWv4WRocSPj9vXvZh1mKZ6Bg0++BBSMS7vn?=
=?us-ascii?Q?omHOpcmPTCHc6NBqSkie9m2k2jBgSUwvzOKqlUC98scA58QVw0Z/YeNj1qRt?=
=?us-ascii?Q?OCFoJR31S6ue5oq9m2iPTUewrxKTx1jK7V/d1Orz0kWCZzCNFLiCkYtJIxUe?=
=?us-ascii?Q?sXgIfnRm0+onsur5D9vQyMZQlWUFDhuHS+Ag2Giqrz9tWDKBXsnsBrtGT3BE?=
=?us-ascii?Q?Yyc5+HZNw9UhMk6JaeIJtNx2TfYg69Set4mp7NRK/X7Rla/zF7eHi+BMQe6c?=
=?us-ascii?Q?UzBrVVW6sjNdT+jNnhTSU60aeMl7EKn7/rx1N5csckyPQsqq8hO7T3TV50+6?=
=?us-ascii?Q?cYezD2DM6eFKewYGv7WiIzebEL728tSKNwgnE4ri4JLUpbJCuBy65JUES1I?=
=?us-ascii?Q?=3D?=
X-Forefront-Antispam-Report:
CIP:135.181.210.111;CTRY:FI;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mustedumn.onmicrosoft.com;PTR:static.111.210.181.135.clients.your-server.de;CAT:OSPM;SFS:(13230022)(39860400002)(346002)(396003)(376002)(136003)(451199015)(1690799008)(46966006)(36840700001)(40470700004)(4744005)(40460700003)(2906002)(82740400003)(356005)(41320700001)(8936002)(166002)(81166007)(36860700001)(6512007)(224303003)(26005)(9686003)(6666004)(70206006)(70586007)(3630700005)(36906005)(36736006)(82310400005)(118246002)(83380400001)(6486002)(6916009)(42882007)(786003)(5660300002)(316002)(478600001)(9316004)(66899015)(63766006)(41300700001)(956004)(47076005)(85182001)(336012)(83170400001)(71280400001)(2876002)(40480700001)(186003)(523964003)(56000400010);DIR:OUT;SFP:1501;
X-OriginatorOrg: mustedumn.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Oct 2022 12:20:34.2290
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 1325517e-f8f9-4a84-e097-08daa9f0aa9f
X-MS-Exchange-CrossTenant-Id: 7aef9087-c590-4578-8f84-622d561e3abb
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=7aef9087-c590-4578-8f84-622d561e3abb;Ip=[135.181.210.111];Helo=[mustedumn.onmicrosoft.com]
X-MS-Exchange-CrossTenant-AuthSource:
SG2APC01FT0064.eop-APC01.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR06MB6213
X-Spam_score: 9.6
X-Spam_score_int: 96
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Gas Anonymous Survey! Congrats! You've been selected to participate
in our monthly $100 Gas Gift Card Promotion! Take this 30 second survey about
Gas and we'll offer you exclusive rewards over $100 Click here to get started
Content analysis details: (9.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.100.164.241 listed in wl.mailspike.net]
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kzvooiy[at]mustedumn.onmicrosoft.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of
words
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.1 FROM_ILLEGAL_CHARS From: has too many raw illegal characters
1.1 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.3 MIME_8BIT_HEADER Message header contains 8-bit character
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
2.5 END_FUTURE_EMAILS Spammy unsubscribe
0.0 T_END_FUTURE_EMAILS Spammy unsubscribe
0.1 SUBJECT_NEEDS_ENCODING Subject is encoded but does not specify
the encoding
Subject: {SPAM?} $ðŸ·ðŸ¶ðŸ¶ ð‘†â„Žð‘’ð‘™ð‘™ ð‘…ð‘’ð‘¤ð‘Žð‘Ÿð‘‘. ð‘ƒð‘Žð‘Ÿð‘¡ð‘–ð‘ð‘–ð‘ð‘Žð‘¡ð‘–ð‘œð‘› ð‘…ð‘’ð‘žð‘¢ð‘–ð‘Ÿð‘’ð‘‘#417
<br /><br />
Gas Anonymous Survey!<br /><br />
Click here to get started
If you'd prefer not to receive future emails, Unsubscribe Here.
337 Garden Oaks Blvd #67967, houston, tx 77018
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 09 Oct 2022 14:12:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ohc7m-000HlT-2P
for dave@doctor.nl2k.ab.ca;
Sun, 09 Oct 2022 13:38:10 -0600
Resent-From: The Doctor
Resent-Date: Sun, 9 Oct 2022 13:38:10 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-sgaapc01hn2241.outbound.protection.outlook.com ([52.100.164.241]:36619 helo=APC01-SG2-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ohVJj-000Pzg-FF
for doctor@netknow.ca;
Sun, 09 Oct 2022 06:22:09 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=WrmhSv9NVDPv8g+wyhp0fhGAbhxtP0f2VaFLJ2lRDSiWgJ+FLvYv7OJ1+b6MvkWLtRCuYDStYnAXWUkpkXO0pTh0RacYPAL5kiWeAi2yOo4E4pRSkj5Ka8BePnY6TWLkTPQaCgnNnxPV5Cjdrr5A1wVeXZ60mavjEPB6brTiiKknLbqV0wqrK8fjJolqtGoEYNzkysH0PNm7l/fOYQzi0JgYUzS9+OX4QEI52xhtlRfdiwzsbkeRjlaBaeEA431cSEowIW5AEQDVoLf/if4NzUfAbCgi9UXxKnUoQI+ylY8Miw9nX1jgZddLFqS5RX1M/LVrWUeJ8Go969aV70DsUg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=AVRzxnp1Lr5V4ZVZiUoB8lszQv9GLWaX6FuYe4r4Org=;
b=SG4O8QEf0xPKog3JKpUg4zC4X86MUTOh0FIuo0tRIXbt6ts0J1cwZVpKCm0r0fXXshmxF3xn1kiZ7TCPZv6TzI9LzHMCR53L0RpV7VCSE7j2G2jisuKv0U+CN4c3z74a/tjQjzoyWxR54ito4KFt+tZ8S/WnOL83+2+W5Uhl2uGItBNOOiqGWzlHqWdPb6HeP6t+1gDeqpY2eynlNCCpHlMIfHwNHZn2CAOvCGYvfBIi0GfIvfW45hdnXgy2LXio86YQ4tVV7btlWZ1B8lZlB8NzekP3OXn7lO//gYhuaF55m8AIhLGZncK44rpxfMkWi4DT7lu/2zMOP9BoupMhqw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is
135.181.210.111) smtp.rcpttodomain=netknow.ca
smtp.mailfrom=mustedumn.onmicrosoft.com; dmarc=none action=none
header.from=pvxjwuuhbjytrwlhbbcetls.com; dkim=none (message not signed);
arc=none
Received: from SG2PR06CA0207.apcprd06.prod.outlook.com (2603:1096:4:68::15) by
TYZPR06MB6213.apcprd06.prod.outlook.com (2603:1096:400:33f::14) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5676.31; Sun, 9 Oct
2022 12:20:35 +0000
Received: from SG2APC01FT0064.eop-APC01.prod.protection.outlook.com
(2603:1096:4:68:cafe::4a) by SG2PR06CA0207.outlook.office365.com
(2603:1096:4:68::15) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5676.17 via Frontend
Transport; Sun, 9 Oct 2022 12:20:35 +0000
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 135.181.210.111)
smtp.mailfrom=mustedumn.onmicrosoft.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=pvxjwuuhbjytrwlhbbcetls.com;
Received-SPF: Fail (protection.outlook.com: domain of
mustedumn.onmicrosoft.com does not designate 135.181.210.111 as permitted
sender) receiver=protection.outlook.com; client-ip=135.181.210.111;
helo=mustedumn.onmicrosoft.com;
Received: from mustedumn.onmicrosoft.com (135.181.210.111) by
SG2APC01FT0064.mail.protection.outlook.com (10.13.36.172) with Microsoft SMTP
Server id 15.20.5709.10 via Frontend Transport; Sun, 9 Oct 2022 12:20:34
+0000
To: doctor@netknow.ca
MIME-Version: 1.0
Date: Sun, 09 Oct 2022 07:40:09 +0000
From:
Reply_To: "Welcome C"
Subject: $ðŸ·ðŸ¶ðŸ¶ ð‘†â„Žð‘’ð‘™ð‘™ ð‘…ð‘’ð‘¤ð‘Žð‘Ÿð‘‘. ð‘ƒð‘Žð‘Ÿð‘¡ð‘–ð‘ð‘–ð‘ð‘Žð‘¡ð‘–ð‘œð‘› ð‘…ð‘’ð‘žð‘¢ð‘–ð‘Ÿð‘’ð‘‘#417
Content-Type: text/html; boundary="1901598-1-b595a9ac7cbe770ae255b23c76163168"
Feedback-ID: 325-anexp#nret-fa:account-notifier
Message-ID: <01073371717827176383039d9ee-c69a3509-5c85-481d-822e-ba65c204e1ba-000000@eu-central-1.amazonses.com>
X-SES-Outgoing: 2022.04.16-69.169.228.231
X-EOPAttributedMessage: 1
X-MS-Office365-Filtering-Correlation-Id: 1325517e-f8f9-4a84-e097-08daa9f0aa9f
X-MS-TrafficTypeDiagnostic:
CWLP265MB2098:EE_|SG2APC01FT0064:EE_|TYZPR06MB6213:EE_
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original:
0uYyfVmzNAynRa88u4radSDV/KjtJo+WsRzHykqIJr4ALDh27GoCuDsulRpOYUYJ1jnfwxQgm/py29ma13m19sSPH1HtWlnd4wgL1tOFiUn1ImVY7Es4DSaVrGvNNgAZexdG1PYYjeEFuUDEvToKqtTyOh38olriM/CQqfoujz5j3LQyi+A3KHJQ+LPdQECIDfATpzGspZ1khXK0J1slb0IFhm+/eZ/CZTiEpPglnR9Uz2nqf0gCYzSpFYW80xT48vJpbtHEF5+jSydJyo7a20+4yz15lZ1vL5WnSFneqFGU7z3ybTgF/BKlmCrw/KrTxB+uXPrMnHWU3xJKRt3wkNO5E46zpX7anOTvoqR/+AFIX9oy7Ep53HQqqQv4VQYHxK1zL24Qpxen3KHOsTrM/nipD+iVLnt1i9bA7D6XNHW9OyV3GyY+JjqEaU3eGkJ1tV7N3PkV4RgaMYKVLJvLpFwJNHf3xl1Y4HGAHLkfcYNh+FHpXzDq5hi0W+dYlX0Vf3NxBUbWFRWO0XhcA1JFmOUWHV0Atxr+BZDW93vBwl1RNxY7deP/7NcxrN33ND9rBENalowwL5q2a7AMXRfsWNpsvVea/Oks09GujhysgoTDykF+jTyzFVLtisXfrFqWw7bz3EiNjPHHZK4o7eEwO8FGvI/7VlkL7eM+BM09GKU/Cqe0upFrI/Xe3vsrrj8bWivJRASOfZlhU9VOs1rdzQ2zVMs+pZ/kS+dv4ZD3QJseVTZ+LtkngL3vdBI6O+6vG2znolWeKB3yPX37APVYmYiOfyh5UMqSSaZ+kRVIoWZDr3O8xLc/foqSLBF/cFwA
X-Forefront-Antispam-Report-Untrusted:
CIP:103.143.76.15;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:confront.whitefov.live;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230016)(376002)(346002)(34096005)(396003)(136003)(39830400003)(46966006)(8676002)(5660300002)(40480700001)(7116003)(2876002)(6916009)(42186006)(316002)(70206006)(30864003)(2906002)(82310400005)(8936002)(70586007)(9686003)(498600001)(33964004)(26005)(71280400001)(41300700001)(3480700007)(66574015)(47076005)(35950700001)(83380400001)(336012)(42882007)(78352004)(18074004)(40580700002)(81166007)(166002)(21314003);DIR:OUT;SFP:1102;
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CWLP265MB2098
X-MS-Exchange-Transport-CrossTenantHeadersStripped:
SG2APC01FT0064.eop-APC01.prod.protection.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs:
d9bdec59-9b57-496b-c94b-08da884d2b6a
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?us-ascii?Q?mUur52pSVIidU9stwYymXUiupkiXzCGIu0Silp1WipJSGx8kB+ZYSkGVAe+F?=
=?us-ascii?Q?jcLRaQpfWc7sZuUeDq33W7SeYRoFgGCkfoCE5brDsePm+24fLOxTavVw8UgH?=
=?us-ascii?Q?ngNfuJzywxMYg2v+O8Ej59Sckj9+YkkVZdeg3zjRfv7caP6vpcWdbQzskLsa?=
=?us-ascii?Q?PEBjTvpLlWWvlFFghjwYogmUGZL8lkWGfo1vwSKppOZVI0L26rmrzMgpsRRX?=
=?us-ascii?Q?ByjdM0GRzPnAB7V1x7fnO0tJhtq4wcpxCvEh35jF5z4u2bYa18eBX6fn9YZ3?=
=?us-ascii?Q?iVa2qkYJF/q/IPAOZJAAWLG6yeMQSSSeirJlf93Ely4Q/p3qJF+uPsvnmJ91?=
=?us-ascii?Q?W2Z85H4n1rHQ7wt2tqGy9hylYrslsw09Wxgx50ZV2dlvF8Vcl/ysg+fC0lNF?=
=?us-ascii?Q?9eKc7H2VRhmEDfdILihZUpwK8KivTq+gTWS3TQ7RIcTq/4Bb+E+t2mr1ztPz?=
=?us-ascii?Q?7+cWRDPAkfLEqpG1d1GQkb1oSgIXQBFgfpM35smwdPh5q0NyC+Jw6vgNoixi?=
=?us-ascii?Q?TkszwsjFFurrMs1BZnmOVw1IMHGFEy+aKuhqrGG/FlXiAdMKX6V3fHgNZzPw?=
=?us-ascii?Q?F9zvXpaNe2zRq9zFRtEIa81V2PFhIzTi8gxIJ3vqYvs6gSKxZuBLoyMHVDBL?=
=?us-ascii?Q?cLBeLiHrE+pTcPubue9JudJpnIPHHTO8+H/y9E5MT+sNjuMRgQIyHMVCQWJ6?=
=?us-ascii?Q?+9II6/kIqaUNYwwpfuh4P40LGR8+oholzRw1qlgEViOcMzCdT0c9+TqcsVHD?=
=?us-ascii?Q?BPXT5b6o5EsTnqBHRNRNyxAAyno87lJsdU4ZZKsY58Hf3G7ThRtNBFN2Nmtf?=
=?us-ascii?Q?TwqCsGVQLzjqjIo//P27gT4wLhWv4WRocSPj9vXvZh1mKZ6Bg0++BBSMS7vn?=
=?us-ascii?Q?omHOpcmPTCHc6NBqSkie9m2k2jBgSUwvzOKqlUC98scA58QVw0Z/YeNj1qRt?=
=?us-ascii?Q?OCFoJR31S6ue5oq9m2iPTUewrxKTx1jK7V/d1Orz0kWCZzCNFLiCkYtJIxUe?=
=?us-ascii?Q?sXgIfnRm0+onsur5D9vQyMZQlWUFDhuHS+Ag2Giqrz9tWDKBXsnsBrtGT3BE?=
=?us-ascii?Q?Yyc5+HZNw9UhMk6JaeIJtNx2TfYg69Set4mp7NRK/X7Rla/zF7eHi+BMQe6c?=
=?us-ascii?Q?UzBrVVW6sjNdT+jNnhTSU60aeMl7EKn7/rx1N5csckyPQsqq8hO7T3TV50+6?=
=?us-ascii?Q?cYezD2DM6eFKewYGv7WiIzebEL728tSKNwgnE4ri4JLUpbJCuBy65JUES1I?=
=?us-ascii?Q?=3D?=
X-Forefront-Antispam-Report:
CIP:135.181.210.111;CTRY:FI;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mustedumn.onmicrosoft.com;PTR:static.111.210.181.135.clients.your-server.de;CAT:OSPM;SFS:(13230022)(39860400002)(346002)(396003)(376002)(136003)(451199015)(1690799008)(46966006)(36840700001)(40470700004)(4744005)(40460700003)(2906002)(82740400003)(356005)(41320700001)(8936002)(166002)(81166007)(36860700001)(6512007)(224303003)(26005)(9686003)(6666004)(70206006)(70586007)(3630700005)(36906005)(36736006)(82310400005)(118246002)(83380400001)(6486002)(6916009)(42882007)(786003)(5660300002)(316002)(478600001)(9316004)(66899015)(63766006)(41300700001)(956004)(47076005)(85182001)(336012)(83170400001)(71280400001)(2876002)(40480700001)(186003)(523964003)(56000400010);DIR:OUT;SFP:1501;
X-OriginatorOrg: mustedumn.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Oct 2022 12:20:34.2290
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 1325517e-f8f9-4a84-e097-08daa9f0aa9f
X-MS-Exchange-CrossTenant-Id: 7aef9087-c590-4578-8f84-622d561e3abb
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=7aef9087-c590-4578-8f84-622d561e3abb;Ip=[135.181.210.111];Helo=[mustedumn.onmicrosoft.com]
X-MS-Exchange-CrossTenant-AuthSource:
SG2APC01FT0064.eop-APC01.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR06MB6213
X-Spam_score: 9.6
X-Spam_score_int: 96
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Gas Anonymous Survey! Congrats! You've been selected to participate
in our monthly $100 Gas Gift Card Promotion! Take this 30 second survey about
Gas and we'll offer you exclusive rewards over $100 Click here to get started
Content analysis details: (9.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.100.164.241 listed in wl.mailspike.net]
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kzvooiy[at]mustedumn.onmicrosoft.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of
words
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.1 FROM_ILLEGAL_CHARS From: has too many raw illegal characters
1.1 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.3 MIME_8BIT_HEADER Message header contains 8-bit character
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
2.5 END_FUTURE_EMAILS Spammy unsubscribe
0.0 T_END_FUTURE_EMAILS Spammy unsubscribe
0.1 SUBJECT_NEEDS_ENCODING Subject is encoded but does not specify
the encoding
Subject: {SPAM?} $ðŸ·ðŸ¶ðŸ¶ ð‘†â„Žð‘’ð‘™ð‘™ ð‘…ð‘’ð‘¤ð‘Žð‘Ÿð‘‘. ð‘ƒð‘Žð‘Ÿð‘¡ð‘–ð‘ð‘–ð‘ð‘Žð‘¡ð‘–ð‘œð‘› ð‘…ð‘’ð‘žð‘¢ð‘–ð‘Ÿð‘’ð‘‘#417
Take this 30 second survey about Gas and
we'll offer you exclusive rewards over $100
Click here to get startedIf you'd prefer not to receive future emails, Unsubscribe Here.
337 Garden Oaks Blvd #67967, houston, tx 77018