Security camera spam from Yahho! and gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 04 Dec 2022 13:05:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1p1vDa-0002tq-V1
for dave@doctor.nl2k.ab.ca;
Sun, 04 Dec 2022 13:04:06 -0700
Resent-From: The Doctor
Resent-Date: Sun, 4 Dec 2022 13:04:06 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [103.161.133.87] (port=43256 helo=qwwj.em.jennycraig.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
id 1p1q1U-000Jgg-34
for sales@nk.ca;
Sun, 04 Dec 2022 07:31:20 -0700
Received: from 10.197.40.207
by atlas101.aol.mail.bf1.yahoo.com pod-id NONE with HTTPS; Tue, 29 Nov 2030 13:45:50 +0000
X-Originating-Ip: [209.85.166.53]
Received-SPF: pass (domain of gmail.com designates 209.85.166.53 as permitted sender)
Authentication-Results: atlas101.aol.mail.bf1.yahoo.com;
dkim=pass header.i=@gmail.com header.s=20210112;
spf=pass smtp.mailfrom=gmail.com;
dmarc=pass(p=NONE,sp=QUARANTINE) header.from=gmail.com;
X-Apparently-To: sales@nk.ca; Tue, 29 Nov 2030 13:45:50 +0000
X-YMailAVSC: aJe6L7k3bBtmhUKKUfAgca3r9gZQOO9kC6oDRdIrDAzzDUr
XWbJtjOrhfFQz_knmpuxpm1Gq8htRLCcKWdF_N8avOdfKspzlPGsSYc2u9rO
B1jZHC9EQv8fkU4E1oBSpPxNhhrzDuLroivMf6P4Tq2_uy2PPbIkzJpzvcy2
QiOuMsTPo8xzauEcxFwVkcf3JdRd23Wfm.R6Zxp7LzgEnlW6pdESb.uRBubk
x.FNayw8KKWLmL9kLlTYkcTBW0KGrqR7ilWANuNBcb0UMzDpegs8EUbwQBfe
4oOc_EpdGeVOw0cqph49ZjUqmevlwDoxkYGr8g.tFbo4dASuNKUrcdgDLHTv
Gmf.afo_WUmYoBhX1TYx5m48lWuAzARqcOv.xSYfKs7enAbV579PJ6GsZSmS
6WwGRJ7kZYvh0p1dKLh0rFEz9LWpLwNSWJLKgHJqY2wSxYpLenN02XEK6vl4
oQv2qFi1F.oANVRzSnTGWXAmSvi47iESEohrJm9JmxCg3JZS7LVrWvY9KHZr
ESAgTgv3lCaFBEaeDSQSyfAkdb9atycl_72dWxeZ0Qu0eHZrRA6z7ozncP96
_BiYFAFxB8txSGnyPh39XuzWmGQGynMyWMwTiElZ2V0C1oyKEC6k9xxOaUMa
8t8jBX0iqdqOtfAetyrsS3HsZJ7l1_u7J0xR_T.zIyopT06GmzXwkjjqAJkh
i4lfmKR8af8Nqgm1svB_YXUMlNfhCpziqYwalbNm9ECkkVyxcnsri21zNltu
E9g.A6HcC78IXBB.qs68Il.kF_6yWRDx.wtQxmNDTllQmr7XruZ2tSgpN4QL
_VWNNexwK07J.fMCuuLGxfKIDRBgWAIrgZ1N4V_NKU60kOn1IYNL7D3zEJTp
sBOPZbndgdh0TcZARmSQB8Sepw_8LyjyGQSTo3Etf.pbzZMWHLR5nkpr8FNP
nod.9iTPISz1UwNHICeGMwBzOQvdLUfuNcqm1f3XUAhdZ.Nr_UlFbNEsP2CU
a_7jxBVLq0UnOwFmOWjKxdCQhMg8De0y8G2ccRr0j2_ilMDZPILmzpCMCuay
zaG1HuiHn
X-YMailISG: D8WnXQ4WLDuoTgXUmbtviF9bfw3PV9PpzUtiPMfr_3wg83j8
hP8k31S2_KK5_Oc2TU4wWADFFraA5hiOBIF7CIIMvSEUrbjXm4d_BgXA8Axb
ypmYhmG3tdsbCB.yJc4TTDuqwm42bJ3VDYJjXhSiNEef7EaXHJ5XbEA6HJ9L
D13p.Mp6e4389wCrXnJbk.xdyO2bxD2n3s1OgK_2_Mt3pe0S6uKT62W3_ecG
upI8AZiv9q56luBsc3no0_Ezt7ubv3DW27vaCiXCI128_uvnLr7fUIpbtN2q
KsRHL21j.R5sorZ2Ga3e3IJ8qzJ2gBN2pysGEH.MfM1pxF8sTesl210jxa0y
ZFWSagoVStITOtxs2oOsCgMZtFdu6je443j2hGMoOzSIwIopTHoLiN5iZSKd
laoNZPZqYMkw3cWMid_f.Yl_ikyOzCCEbk6WhD2WLyYCuGdpn5BdIepnXIxR
cFNtHrLaZvrVFbfy5gxKn0TtrhLhuJ6sSm0Z3lsGCgX8jeHEw4ljw5SiE6c6
hkjpyYEc_suxA5TstYk6Qwxr6jlyd_FxYV_t5VzXnvXXFzkc3xGU6LG8i9mg
Fgkp8tqFpCdzDAALvwmdmEi_xav5qvwe6qXfsYBBK4O.hXKXGrDV9Wbn9DfW
8hbWGM2.R.lxm1DfNmQz6GQivQeW2HyiDrw5lI86U403yq8tbIe_TYX10GjL
4dGaIUKH1ntINsUF1H.Ernp9s19hnL934qnxhz1ecL7dpob9aa0CEWLztV8t
jd3I0n6Kxy27rVRRAsi39CBx_06YoLMbmP0PVyf8jcY400Bt4MjQm5NiOxfz
KtPKaCcZgxKMaSp7GMPI.SIb66PvIEuguR3ncYCXbAqvu_8WfbE6.IYJqs2J
5kBtJQF7ak4z4QkgXRBAxhKPBOVIrYYtsRSbH_YHuqS2P3jdf5I7j7_kP9cN
hLR0T53zK_V8F.n2zdBo.uJgIwgZqG0eMj6zm72hL7EP7uU5komgSNpVembr
aSosNCbn7DShBZtXIZfj7bU8s0Lj68.61A5P7p0YJbjPKf.pi.3.v0IY_NwA
N7ITPu2gZF9E61cGcthFtRHo045K
Received: from 209.85.166.53 (EHLO mail-io1-f53.google.com)
by 10.197.40.207 with SMTPs
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256);
Tue, 29 Nov 2030 13:45:50 +0000
Received: by mail-io1-f53.google.com with SMTP id h206so10021259iof.10
for; Tue, 29 Nov 2030 05:45:50 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=D5pcAaFwc0RggIPAkn9CpEMc8E/Kj67IKZx0WGTVaTw=;
b=b7CkaIDbMJ2Srsc3Y1N5JHTH7RnMMRKDA2DEN76GsRqXClfYiDDa6Ker/eOpg7JrSK
Te9YNoZ+97sjMytMZrrW6OoCozSa1KjSxwQrc5EdZsEDGlhfBklvlTOi9o590PlXks9O
ccKkxa8RlEmAmzEOW1+DBumWh8/7xwJxnTsaI8HT8JuuB1nJvqGhcV+u+6Nwq24C1iB4
SIGghW8/rboy0humDWhenX3xkQQNJF02NvyJrda/kuq8hmvwvXrXN/9rhmlBgvCcnxf+
cC9drTzgWQWEaPxvzMqrAUODTtrN/mbDFIMiIsOmDtA7CQUltWNMPTsiAFFC4BodFymH
FsPA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=D5pcAaFwc0RggIPAkn9CpEMc8E/Kj67IKZx0WGTVaTw=;
b=cjjpxaurUHayFWous4eM7+mdbhpGUFtsQuUoT2taMd+K3FaTk+f4r/w9SDgSfu39Bs
Vo6k3HuKsAoOcpaxyK0ktrfD5DuqwwTt4FqDPjma+YHaX6EQf7ofeRo5IKovRfn4BxNm
haoXhRbmspk8pVdwJ/mKCcWLeiL52zQ2V2ZHunXbGyaKZg7EDWEnOMrKC3PlkneRlrQ2
bzPwYRa91Z7AoA5tZDaCBjlXIOwp8tr8jNiB4zKbzb0IH3hfzmkono42YJLkHMdJlncR
kOkhJeMT7FJnKGPIJ57iBsfUOArORopPR/RNYVOw4JnpoXZwwPbYLCgpAvtdve3j7Yhq
+GfQ==
X-Gm-Message-State: ANoB5pklrRTkgmmeoQ0MKwZc3Dka5fdefk6lgOiT+V83jfp4iFlRMJ1x
OGZu2ygqQE6wIB9Ou04iyM/f3sdkfxcEiG3lhtphuzqWN7s=
X-Google-Smtp-Source: AA0mqf43oRgQlpZppYGiTKH5dx/rdK/JnLIkxlodInBHS6OxmiPhaE+ESlED86v60Xv5mblAv30+BrVpzinJrWjF9co=
X-Received: by 2002:a92:de11:0:b0:2fa:46fd:c430 with SMTP id
x17-20020a92de11000000b002fa46fdc430mr26244332ilm.71.1669729237709; Tue, 29
Nov 2030 05:40:37 -0800 (PST)
MIME-Version: 1.0
From: Security Camera
Date: Tue, 29 Nov 2030 14:40:28 +0100
Message-ID:
Subject: Light Socket Security Camera - your home is secure.Â
To: sales
Content-Type: text/html;
X-Spam_score: 10.0
X-Spam_score_int: 100
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Light Socket Security Camera - your home is secure. Document
If you do not wish to receive future messages click here to unsubscribe 4122
Keaton Crossing Blvd, STE 104 O'Fallon MO 63368
Content analysis details: (10.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[103.161.133.87 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.1 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters
0.3 MIME_8BIT_HEADER Message header contains 8-bit character
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay
lines
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.5 STYLE_GIBBERISH Nonsense in HTML
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 04 Dec 2022 13:05:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1p1vDa-0002tq-V1
for dave@doctor.nl2k.ab.ca;
Sun, 04 Dec 2022 13:04:06 -0700
Resent-From: The Doctor
Resent-Date: Sun, 4 Dec 2022 13:04:06 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [103.161.133.87] (port=43256 helo=qwwj.em.jennycraig.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
id 1p1q1U-000Jgg-34
for sales@nk.ca;
Sun, 04 Dec 2022 07:31:20 -0700
Received: from 10.197.40.207
by atlas101.aol.mail.bf1.yahoo.com pod-id NONE with HTTPS; Tue, 29 Nov 2030 13:45:50 +0000
X-Originating-Ip: [209.85.166.53]
Received-SPF: pass (domain of gmail.com designates 209.85.166.53 as permitted sender)
Authentication-Results: atlas101.aol.mail.bf1.yahoo.com;
dkim=pass header.i=@gmail.com header.s=20210112;
spf=pass smtp.mailfrom=gmail.com;
dmarc=pass(p=NONE,sp=QUARANTINE) header.from=gmail.com;
X-Apparently-To: sales@nk.ca; Tue, 29 Nov 2030 13:45:50 +0000
X-YMailAVSC: aJe6L7k3bBtmhUKKUfAgca3r9gZQOO9kC6oDRdIrDAzzDUr
XWbJtjOrhfFQz_knmpuxpm1Gq8htRLCcKWdF_N8avOdfKspzlPGsSYc2u9rO
B1jZHC9EQv8fkU4E1oBSpPxNhhrzDuLroivMf6P4Tq2_uy2PPbIkzJpzvcy2
QiOuMsTPo8xzauEcxFwVkcf3JdRd23Wfm.R6Zxp7LzgEnlW6pdESb.uRBubk
x.FNayw8KKWLmL9kLlTYkcTBW0KGrqR7ilWANuNBcb0UMzDpegs8EUbwQBfe
4oOc_EpdGeVOw0cqph49ZjUqmevlwDoxkYGr8g.tFbo4dASuNKUrcdgDLHTv
Gmf.afo_WUmYoBhX1TYx5m48lWuAzARqcOv.xSYfKs7enAbV579PJ6GsZSmS
6WwGRJ7kZYvh0p1dKLh0rFEz9LWpLwNSWJLKgHJqY2wSxYpLenN02XEK6vl4
oQv2qFi1F.oANVRzSnTGWXAmSvi47iESEohrJm9JmxCg3JZS7LVrWvY9KHZr
ESAgTgv3lCaFBEaeDSQSyfAkdb9atycl_72dWxeZ0Qu0eHZrRA6z7ozncP96
_BiYFAFxB8txSGnyPh39XuzWmGQGynMyWMwTiElZ2V0C1oyKEC6k9xxOaUMa
8t8jBX0iqdqOtfAetyrsS3HsZJ7l1_u7J0xR_T.zIyopT06GmzXwkjjqAJkh
i4lfmKR8af8Nqgm1svB_YXUMlNfhCpziqYwalbNm9ECkkVyxcnsri21zNltu
E9g.A6HcC78IXBB.qs68Il.kF_6yWRDx.wtQxmNDTllQmr7XruZ2tSgpN4QL
_VWNNexwK07J.fMCuuLGxfKIDRBgWAIrgZ1N4V_NKU60kOn1IYNL7D3zEJTp
sBOPZbndgdh0TcZARmSQB8Sepw_8LyjyGQSTo3Etf.pbzZMWHLR5nkpr8FNP
nod.9iTPISz1UwNHICeGMwBzOQvdLUfuNcqm1f3XUAhdZ.Nr_UlFbNEsP2CU
a_7jxBVLq0UnOwFmOWjKxdCQhMg8De0y8G2ccRr0j2_ilMDZPILmzpCMCuay
zaG1HuiHn
X-YMailISG: D8WnXQ4WLDuoTgXUmbtviF9bfw3PV9PpzUtiPMfr_3wg83j8
hP8k31S2_KK5_Oc2TU4wWADFFraA5hiOBIF7CIIMvSEUrbjXm4d_BgXA8Axb
ypmYhmG3tdsbCB.yJc4TTDuqwm42bJ3VDYJjXhSiNEef7EaXHJ5XbEA6HJ9L
D13p.Mp6e4389wCrXnJbk.xdyO2bxD2n3s1OgK_2_Mt3pe0S6uKT62W3_ecG
upI8AZiv9q56luBsc3no0_Ezt7ubv3DW27vaCiXCI128_uvnLr7fUIpbtN2q
KsRHL21j.R5sorZ2Ga3e3IJ8qzJ2gBN2pysGEH.MfM1pxF8sTesl210jxa0y
ZFWSagoVStITOtxs2oOsCgMZtFdu6je443j2hGMoOzSIwIopTHoLiN5iZSKd
laoNZPZqYMkw3cWMid_f.Yl_ikyOzCCEbk6WhD2WLyYCuGdpn5BdIepnXIxR
cFNtHrLaZvrVFbfy5gxKn0TtrhLhuJ6sSm0Z3lsGCgX8jeHEw4ljw5SiE6c6
hkjpyYEc_suxA5TstYk6Qwxr6jlyd_FxYV_t5VzXnvXXFzkc3xGU6LG8i9mg
Fgkp8tqFpCdzDAALvwmdmEi_xav5qvwe6qXfsYBBK4O.hXKXGrDV9Wbn9DfW
8hbWGM2.R.lxm1DfNmQz6GQivQeW2HyiDrw5lI86U403yq8tbIe_TYX10GjL
4dGaIUKH1ntINsUF1H.Ernp9s19hnL934qnxhz1ecL7dpob9aa0CEWLztV8t
jd3I0n6Kxy27rVRRAsi39CBx_06YoLMbmP0PVyf8jcY400Bt4MjQm5NiOxfz
KtPKaCcZgxKMaSp7GMPI.SIb66PvIEuguR3ncYCXbAqvu_8WfbE6.IYJqs2J
5kBtJQF7ak4z4QkgXRBAxhKPBOVIrYYtsRSbH_YHuqS2P3jdf5I7j7_kP9cN
hLR0T53zK_V8F.n2zdBo.uJgIwgZqG0eMj6zm72hL7EP7uU5komgSNpVembr
aSosNCbn7DShBZtXIZfj7bU8s0Lj68.61A5P7p0YJbjPKf.pi.3.v0IY_NwA
N7ITPu2gZF9E61cGcthFtRHo045K
Received: from 209.85.166.53 (EHLO mail-io1-f53.google.com)
by 10.197.40.207 with SMTPs
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256);
Tue, 29 Nov 2030 13:45:50 +0000
Received: by mail-io1-f53.google.com with SMTP id h206so10021259iof.10
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=D5pcAaFwc0RggIPAkn9CpEMc8E/Kj67IKZx0WGTVaTw=;
b=b7CkaIDbMJ2Srsc3Y1N5JHTH7RnMMRKDA2DEN76GsRqXClfYiDDa6Ker/eOpg7JrSK
Te9YNoZ+97sjMytMZrrW6OoCozSa1KjSxwQrc5EdZsEDGlhfBklvlTOi9o590PlXks9O
ccKkxa8RlEmAmzEOW1+DBumWh8/7xwJxnTsaI8HT8JuuB1nJvqGhcV+u+6Nwq24C1iB4
SIGghW8/rboy0humDWhenX3xkQQNJF02NvyJrda/kuq8hmvwvXrXN/9rhmlBgvCcnxf+
cC9drTzgWQWEaPxvzMqrAUODTtrN/mbDFIMiIsOmDtA7CQUltWNMPTsiAFFC4BodFymH
FsPA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=D5pcAaFwc0RggIPAkn9CpEMc8E/Kj67IKZx0WGTVaTw=;
b=cjjpxaurUHayFWous4eM7+mdbhpGUFtsQuUoT2taMd+K3FaTk+f4r/w9SDgSfu39Bs
Vo6k3HuKsAoOcpaxyK0ktrfD5DuqwwTt4FqDPjma+YHaX6EQf7ofeRo5IKovRfn4BxNm
haoXhRbmspk8pVdwJ/mKCcWLeiL52zQ2V2ZHunXbGyaKZg7EDWEnOMrKC3PlkneRlrQ2
bzPwYRa91Z7AoA5tZDaCBjlXIOwp8tr8jNiB4zKbzb0IH3hfzmkono42YJLkHMdJlncR
kOkhJeMT7FJnKGPIJ57iBsfUOArORopPR/RNYVOw4JnpoXZwwPbYLCgpAvtdve3j7Yhq
+GfQ==
X-Gm-Message-State: ANoB5pklrRTkgmmeoQ0MKwZc3Dka5fdefk6lgOiT+V83jfp4iFlRMJ1x
OGZu2ygqQE6wIB9Ou04iyM/f3sdkfxcEiG3lhtphuzqWN7s=
X-Google-Smtp-Source: AA0mqf43oRgQlpZppYGiTKH5dx/rdK/JnLIkxlodInBHS6OxmiPhaE+ESlED86v60Xv5mblAv30+BrVpzinJrWjF9co=
X-Received: by 2002:a92:de11:0:b0:2fa:46fd:c430 with SMTP id
x17-20020a92de11000000b002fa46fdc430mr26244332ilm.71.1669729237709; Tue, 29
Nov 2030 05:40:37 -0800 (PST)
MIME-Version: 1.0
From: Security Camera
Date: Tue, 29 Nov 2030 14:40:28 +0100
Message-ID:
Subject: Light Socket Security Camera - your home is secure.Â
To: sales
Content-Type: text/html;
X-Spam_score: 10.0
X-Spam_score_int: 100
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Light Socket Security Camera - your home is secure. Document
If you do not wish to receive future messages click here to unsubscribe 4122
Keaton Crossing Blvd, STE 104 O'Fallon MO 63368
Content analysis details: (10.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[103.161.133.87 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.1 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters
0.3 MIME_8BIT_HEADER Message header contains 8-bit character
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay
lines
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.5 STYLE_GIBBERISH Nonsense in HTML