German Mcafee phish from sendgrid
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 03 Sep 2023 17:05:08 -0600
Received: from s.wfbtzhss.outbound-mail.sendgrid.net ([159.183.224.102]:51154)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qcvwi-000LXa-1F
for dave@doctor.nl2k.ab.ca;
Sun, 03 Sep 2023 16:52:01 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sumeruglobal.in;
h=from:subject:content-type:content-transfer-encoding:to:cc:
list-unsubscribe:cc:content-type:from:subject:to;
s=s1; bh=MBSzuICyQSfq5yVJvVm/ss07x+lrW0X3SMRSwm9BsQE=;
b=FIC61BzzKrHLzv1Xo3q1o4PPUjafwpmtkeu6vAzVjyUSXwTzu2NyWFN3NdLCWyaMihbi
C+6PUcyF1S3DttdIgEDli+325hYFBP9Ub7nV9wrMfKn6Fdu+dEWhs4cNQ/FAToVQszhHb1
EkFNW9APe24YShvG+Cx9ZGcRpSeQKW/eSuRTUxNCmvraviuBr63UYniFPIa2PHQ8dhIpsy
nA9qh+4xm+9Zmptk2RyoYtmmxEyIl8xmMgmB7jvatSNUaykd85aI2KLyOe2UKsnacPj4u1
IsVeYg7Opgw01GxgC4Ppn6Hm5LtY1mUheBnZcat4nbI5axpsSQ53AkFbN8jLl6Mw==
Received: by filterdrecv-7bd468c8f9-rnqwt with SMTP id filterdrecv-7bd468c8f9-rnqwt-1-64F50D8C-2B
2023-09-03 22:49:48.532030817 +0000 UTC m=+791671.348037822
Received: from amazon.com (unknown)
by geopod-ismtpd-2 (SG) with ESMTP
id 8yGkpx8_SCOIFqkrNhG28Q
for;
Sun, 03 Sep 2023 22:49:48.405 +0000 (UTC)
Date: Sun, 03 Sep 2023 22:49:48 +0000 (UTC)
From: Mcafee
Subject: [Reageren-vereist! ]: dave, Uw pc loopt gevaar 01/09/2023
Content-Type: multipart/alternative;
boundary="b1_493f3521f617a60df11e3e28d4b9a36b"
Content-Transfer-Encoding: 8bit
Message-ID: <8yGkpx8_SCOIFqkrNhG28Q@geopod-ismtpd-2>
X-SG-EID:
=?us-ascii?Q?vasJryaBgzKftuMacv0hJ4yNv8=2FfflR0LRCl4Dix01A=2FerhbZgg5Cpe7OOxAlL?=
=?us-ascii?Q?Pcsa7WurQNrM5UOlLU6Y6oFbvBqb6x6maAWRFm9?=
=?us-ascii?Q?DjH8O1hIrtuRKXI=2F1OwTAFTA2=2FKn9owk9+6dx=2Fg?=
=?us-ascii?Q?fBfeVwtPyaFSIWnYBf+2QrJ79=2FTGIhwFcFzVe9o?=
=?us-ascii?Q?mm6JMKxh2IBx=2Fbsw0BtNXSkGwH+G6xSALwo1hfu?=
=?us-ascii?Q?TaKHVYnS1kG2mwr7UuMHnzY5=2FSTbANIYo0Qo7R?=
To: dave@doctor.nl2k.ab.ca, dave@doctor.nl2k.ab.ca
Cc: dave@doctor.nl2k.ab.ca, dave@doctor.nl2k.ab.ca
X-Entity-ID: dQz5dYt+H1sU4J67+moEwA==
List-Unsubscribe:
=?us-ascii?Q?=3Cmailto=3Aunsubscribe=40em7084=2Esumeruglobal=2Ein=3Fsubject=3Dhttps=3A=2F=2Fu59?=
=?us-ascii?Q?00831=2Ect=2Esendgrid=2Enet=2Fwf=2Funsubscribe*q*?=
=?us-ascii?Q?upn=3DRwqbuA1RWCAoiKBnn68VlWdp0STRCwp7OFf?=
=?us-ascii?Q?xdNLd1Oah5uBC8tJQ5Bo6Y2-2BygAubaHXUGQUX?=
=?us-ascii?Q?7tyzxyVPOcfzrZVBOk1oxi5geuMZ0ErQibHbADl?=
=?us-ascii?Q?c1mMf4wjd74ZEfF513P-2F0gt7S8g2wDmEDYdDW?=
=?us-ascii?Q?ffkcGlHid-2Bw0POUJVZJwoVf1kueD-2BYPCc30?=
=?us-ascii?Q?Y4Tv-2B-2F99vIHaS5TPzzzT3tEuwNFr7tG18mM?=
=?us-ascii?Q?zHFh7igkc573WjvYM-3D=3E?=
X-Spam_score: 5.5
X-Spam_score_int: 55
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Г‚ Tracking number165414491 Your package is waiting for delivery
!
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.1 URIBL_GREY Contains an URL listed in the URIBL greylist
[URI: sendgrid.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)
[159.183.224.102 listed in wl.mailspike.net]
0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
address
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} [Reageren-vereist! ]: dave, Uw pc loopt gevaar 01/09/2023
--b1_493f3521f617a60df11e3e28d4b9a36b
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
В
Tracking number165414491
Your package is waiting for delivery !
Hi memka,In order to complete the delivery of your package , please confirm the payment (1.65 CAD). Online confirmation must be made within the next 14 days, before it expires.
Deliver my package
Kind regards,2023 В© DHL International GmbH. All rights reserved.
В
В
В
If you would like to unsubscribe and stop receiving these emails click here: https://u5900831.ct.sendgrid.net/wf/unsubscribe?upn=RwqbuA1RWCAoiKBnn68VlWdp0STRCwp7OFfxdNLd1Oah5uBC8tJQ5Bo6Y2-2BygAube-2B70luD-2B83QqxoLt4MmiAOAsv0OyZWypO8oVjScmGRWyNvdeuTxusxByF3GC3shbH1Oe7HyNFChMIXX3FZ85E-2B3CRPnGgsfnSz5O46dKCnhe7JQq3Q1Yww5KBEll18rOwbo-2Bzwsj8u5oLFIwGJGahM61TBeJrX-2BDhIChMisPEH4-3D.
--b1_493f3521f617a60df11e3e28d4b9a36b
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 03 Sep 2023 17:05:08 -0600
Received: from s.wfbtzhss.outbound-mail.sendgrid.net ([159.183.224.102]:51154)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qcvwi-000LXa-1F
for dave@doctor.nl2k.ab.ca;
Sun, 03 Sep 2023 16:52:01 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sumeruglobal.in;
h=from:subject:content-type:content-transfer-encoding:to:cc:
list-unsubscribe:cc:content-type:from:subject:to;
s=s1; bh=MBSzuICyQSfq5yVJvVm/ss07x+lrW0X3SMRSwm9BsQE=;
b=FIC61BzzKrHLzv1Xo3q1o4PPUjafwpmtkeu6vAzVjyUSXwTzu2NyWFN3NdLCWyaMihbi
C+6PUcyF1S3DttdIgEDli+325hYFBP9Ub7nV9wrMfKn6Fdu+dEWhs4cNQ/FAToVQszhHb1
EkFNW9APe24YShvG+Cx9ZGcRpSeQKW/eSuRTUxNCmvraviuBr63UYniFPIa2PHQ8dhIpsy
nA9qh+4xm+9Zmptk2RyoYtmmxEyIl8xmMgmB7jvatSNUaykd85aI2KLyOe2UKsnacPj4u1
IsVeYg7Opgw01GxgC4Ppn6Hm5LtY1mUheBnZcat4nbI5axpsSQ53AkFbN8jLl6Mw==
Received: by filterdrecv-7bd468c8f9-rnqwt with SMTP id filterdrecv-7bd468c8f9-rnqwt-1-64F50D8C-2B
2023-09-03 22:49:48.532030817 +0000 UTC m=+791671.348037822
Received: from amazon.com (unknown)
by geopod-ismtpd-2 (SG) with ESMTP
id 8yGkpx8_SCOIFqkrNhG28Q
for
Sun, 03 Sep 2023 22:49:48.405 +0000 (UTC)
Date: Sun, 03 Sep 2023 22:49:48 +0000 (UTC)
From: Mcafee
Subject: [Reageren-vereist! ]: dave, Uw pc loopt gevaar 01/09/2023
Content-Type: multipart/alternative;
boundary="b1_493f3521f617a60df11e3e28d4b9a36b"
Content-Transfer-Encoding: 8bit
Message-ID: <8yGkpx8_SCOIFqkrNhG28Q@geopod-ismtpd-2>
X-SG-EID:
=?us-ascii?Q?vasJryaBgzKftuMacv0hJ4yNv8=2FfflR0LRCl4Dix01A=2FerhbZgg5Cpe7OOxAlL?=
=?us-ascii?Q?Pcsa7WurQNrM5UOlLU6Y6oFbvBqb6x6maAWRFm9?=
=?us-ascii?Q?DjH8O1hIrtuRKXI=2F1OwTAFTA2=2FKn9owk9+6dx=2Fg?=
=?us-ascii?Q?fBfeVwtPyaFSIWnYBf+2QrJ79=2FTGIhwFcFzVe9o?=
=?us-ascii?Q?mm6JMKxh2IBx=2Fbsw0BtNXSkGwH+G6xSALwo1hfu?=
=?us-ascii?Q?TaKHVYnS1kG2mwr7UuMHnzY5=2FSTbANIYo0Qo7R?=
To: dave@doctor.nl2k.ab.ca, dave@doctor.nl2k.ab.ca
Cc: dave@doctor.nl2k.ab.ca, dave@doctor.nl2k.ab.ca
X-Entity-ID: dQz5dYt+H1sU4J67+moEwA==
List-Unsubscribe:
=?us-ascii?Q?=3Cmailto=3Aunsubscribe=40em7084=2Esumeruglobal=2Ein=3Fsubject=3Dhttps=3A=2F=2Fu59?=
=?us-ascii?Q?00831=2Ect=2Esendgrid=2Enet=2Fwf=2Funsubscribe*q*?=
=?us-ascii?Q?upn=3DRwqbuA1RWCAoiKBnn68VlWdp0STRCwp7OFf?=
=?us-ascii?Q?xdNLd1Oah5uBC8tJQ5Bo6Y2-2BygAubaHXUGQUX?=
=?us-ascii?Q?7tyzxyVPOcfzrZVBOk1oxi5geuMZ0ErQibHbADl?=
=?us-ascii?Q?c1mMf4wjd74ZEfF513P-2F0gt7S8g2wDmEDYdDW?=
=?us-ascii?Q?ffkcGlHid-2Bw0POUJVZJwoVf1kueD-2BYPCc30?=
=?us-ascii?Q?Y4Tv-2B-2F99vIHaS5TPzzzT3tEuwNFr7tG18mM?=
=?us-ascii?Q?zHFh7igkc573WjvYM-3D=3E?=
X-Spam_score: 5.5
X-Spam_score_int: 55
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Г‚ Tracking number165414491 Your package is waiting for delivery
!
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.1 URIBL_GREY Contains an URL listed in the URIBL greylist
[URI: sendgrid.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)
[159.183.224.102 listed in wl.mailspike.net]
0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
address
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} [Reageren-vereist! ]: dave, Uw pc loopt gevaar 01/09/2023
--b1_493f3521f617a60df11e3e28d4b9a36b
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
В
Tracking number165414491
Your package is waiting for delivery !
Hi memka,In order to complete the delivery of your package , please confirm the payment (1.65 CAD). Online confirmation must be made within the next 14 days, before it expires.
Deliver my package
Kind regards,2023 В© DHL International GmbH. All rights reserved.
В
В
В
If you would like to unsubscribe and stop receiving these emails click here: https://u5900831.ct.sendgrid.net/wf/unsubscribe?upn=RwqbuA1RWCAoiKBnn68VlWdp0STRCwp7OFfxdNLd1Oah5uBC8tJQ5Bo6Y2-2BygAube-2B70luD-2B83QqxoLt4MmiAOAsv0OyZWypO8oVjScmGRWyNvdeuTxusxByF3GC3shbH1Oe7HyNFChMIXX3FZ85E-2B3CRPnGgsfnSz5O46dKCnhe7JQq3Q1Yww5KBEll18rOwbo-2Bzwsj8u5oLFIwGJGahM61TBeJrX-2BDhIChMisPEH4-3D.
--b1_493f3521f617a60df11e3e28d4b9a36b
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit
Om deze e-mail als webpagina weer te geven, click here
РњcО‘feeВ©
Uw abonnement is vandaag gesloten. We hebben vaak geprobeerd om u te waarschuwen: Verleng onmiddellijk. Maak uw apparaat veiliger door uw abonnement te verlengen om uw gezin te beschermen tegen steeds veranderende bedreigingen. Als je je lidmaatschap niet hebt verlengd, wordt je account binnen 48 u
ur gesloten.
ur gesloten.
| Rekening-id: | 2170975644 |
| Gebruiker: | dave |
| Beveiligde status: | Opgeschort |
| Korting vandaag: | 90В % |
| Beperkte t ijd: | 04-09-2023 |
Abonnement vernieuwen