PetroCanada Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 May 2024 13:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5sFI-000000000WG-1y63

for dave@doctor.nl2k.ab.ca;

Sat, 11 May 2024 13:19:00 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 May 2024 13:19:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ca.webcomacademie.com ([5.149.252.254]:37578)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5pjJ-000000004c4-1YFY

for root@nk.ca;

Sat, 11 May 2024 10:37:53 -0600

MIME-Version: 1.0

Message-Id:

From: Petro-Canada®

Subject: important information

Reply-To: reply_tolTGMQYt@ca.webcomacademie.com

To: root@nk.ca

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset=UTF-8

Date: Sat, 11 May 2024 16:35:45 +0000

List-Unsubscribe:
List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Spam_score: 9.4

X-Spam_score_int: 94

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please verify: GET STARTED! It's FREE



Content analysis details: (9.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[5.149.252.254 listed in dnsbl.ahbl.org]

[5.149.252.254 listed in dnsbl.ahbl.org]

[5.149.252.254 listed in dnsbl.ahbl.org]

[5.149.252.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[5.149.252.254 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[5.149.252.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[5.149.252.254 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[5.149.252.254 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.0 HK_RANDOM_FROM From username looks random

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

Subject: {SPAM?} important information













































I1.01KLLD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

PetroCanada Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 May 2024 13:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5sFN-000000000Wo-0eff

for dave@doctor.nl2k.ab.ca;

Sat, 11 May 2024 13:19:05 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 May 2024 13:19:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ca.webcomacademie.com ([5.149.252.254]:48690)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5poJ-000000005He-0Feu

for root@nk.ca;

Sat, 11 May 2024 10:43:02 -0600

MIME-Version: 1.0

Message-Id:

From: Petro-Canada®

Subject: important information

Reply-To: reply_tomqbCLTJ@ca.webcomacademie.com

To: root@nk.ca

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset=UTF-8

Date: Sat, 11 May 2024 16:41:00 +0000

List-Unsubscribe:
List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Spam_score: 9.9

X-Spam_score_int: 99

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please verify: GET STARTED! It's FREE



Content analysis details: (9.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

[5.149.252.254 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[5.149.252.254 listed in dnsbl.ahbl.org]

[5.149.252.254 listed in dnsbl.ahbl.org]

[5.149.252.254 listed in dnsbl.ahbl.org]

[5.149.252.254 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[5.149.252.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[5.149.252.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[5.149.252.254 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[5.149.252.254 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.0 HK_RANDOM_FROM From username looks random

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

Subject: {SPAM?} important information













































I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Web / App SEO spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 May 2024 13:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5sFq-000000000aa-3qZX

for dave@doctor.nl2k.ab.ca;

Sat, 11 May 2024 13:19:34 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 May 2024 13:19:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01olkn2105.outbound.protection.outlook.com ([40.92.53.105]:16207 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5sBL-00000000Pfm-01OO

for sales@nk.ca;

Sat, 11 May 2024 13:15:07 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=OcX87kLR2xteJSESdc/9ua/MppLJ3Jj3Gc5AzKPoMy9hzOWV5gBl6hUkrQee2mSsoldLZzZTq18hWHeUt0zA7P+yeOIYxKKIiQMah/ImfhR6vFlqAqYpM28YEyXEqea9KkMYjmsJpYNFez2IjCFzmZHZP39XSWvYnjusdlscktuZKJFQydXLY+krU5qQblFXdKTC4iFl2/lawZ7JsnpJf/QVJI5a8py4bKaT1pdE/fRKDFXfU81YUy4UEyLkafpJi8HT4puQx69wiqP5Zs40XxGfImRVEz6klgYi+QtxYnMmgcdDaY1rntikiVdx3TRgpnyn/tDRNDUtM6UGW+XJYQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=X3XYBvDhby8pZOXt9OWOu422omjO2JTsX5S9VoSuWL4=;

b=ckcCruakvEajq1OTrJLQJLBanZxfeCzUHqSpr6l0eOWiS10a3RlNJNJQM2yy5QCFHyEgkrDjB2dwyu/9ZFPh9k7M5xaaw++K4Zj8OaIQEetSh9P11AB9psV05NviRbFSEVUcOvHFqdF9vSR5Y5EDg9p89DcLNCUat0LOSwAk2GZMxDcdB6N4SYZsIg3+ouoGyrO4oM9DzmH2W5jTOPQH6qAdZxmX2PGxpjsJGfYdmYIB844iU/qz3+NicJcqhQ3lyOwqoznwYwL0IR08gOT8TR8f8UfRBPzDyeNi39Cdkqk1MJ7f3jpx4Q0bwGROMZboxO3frAxssQOGKkhX4HI6gA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=X3XYBvDhby8pZOXt9OWOu422omjO2JTsX5S9VoSuWL4=;

b=sc+ktnPQEJxknqZtUoicxT14MEMCpx/7dc7VzrELFvEDOVrz+1M/ld+mxNp0ugD1pUl8+lMkclUcPvF5+hfNWm20X5wJXgA1TuPbvYWSZIyM162kMzAGmmnA5r7MPzM3g6cqfAgJJ6Jz6JcocEAHeb2NIKTRmF/fhCgLE9tMQqfAq6pjscdgoC+eMr7J60Hlyc3dJd26aYOZepO2xhPbGp+ftlq03+R5yasp4b/XUXtlqoLfUf1NHF+o5yLxbOt8MrW4xajTHxo/asGl+qQ5061Nkn7JLOZgJJiGZqKzT9O2DyC1GX6mQYZD5dWAU4yoOQW28VjaxTf0Hp2ehOqnjg==

Received: from SEZPR01MB4575.apcprd01.prod.exchangelabs.com

(2603:1096:101:7a::9) by OSQPR01MB6089.apcprd01.prod.exchangelabs.com

(2603:1096:604:271::8) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7544.55; Sat, 11 May

2024 19:11:52 +0000

Received: from SEZPR01MB4575.apcprd01.prod.exchangelabs.com

([fe80::86ec:c5be:4106:c311]) by SEZPR01MB4575.apcprd01.prod.exchangelabs.com

([fe80::86ec:c5be:4106:c311%6]) with mapi id 15.20.7544.052; Sat, 11 May 2024

19:11:52 +0000

From: Courtney Clarke

Subject: Elevate Your Website Performance

Thread-Topic: Elevate Your Website Performance

Thread-Index: AQHao9cSioFjU+hSPkmLxJ4oKueDjg==

Date: Sat, 11 May 2024 19:11:50 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [RfNXoQghJq0CXrIcDS613iMchhEjFCXY]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR01MB4575:EE_|OSQPR01MB6089:EE_

x-ms-office365-filtering-correlation-id: c56003b4-ffcb-4850-a3f4-08dc71ee35ee

x-microsoft-antispam:

BCL:0;ARA:14566002|461199019|3412199016|440099019|102099023;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?stGwVCs1Q23+nMZgJXojNfyxqswBlErMoEx0scHf5NQbZ1cXuy1wI+x1tt?=

=?iso-8859-1?Q?5xfzkAT0rDi+O7Bhxgwex4eY/O8MGcN2teU0daWnPoaKegObYG9JY9FLWc?=

=?iso-8859-1?Q?ZVqsP+p7Bd3gwWpHZ5rvJrMMvRkCrmVhCTJWX6uI5nZA3aZOSd/eZpH+wq?=

=?iso-8859-1?Q?kJ5xJ7Y2HPfFEiv288pYbD82U2XVuLjz3LHkm/jaOsC9d4fGX6qHbgtQjZ?=

=?iso-8859-1?Q?8Z2Gfd+ewfG2zU+pDSYIRBzFzQKAWKoOFhkHJBO1Dieux2i3vGlMn7Z4JU?=

=?iso-8859-1?Q?QFISPDNpY3gXQoLK857pgzR5UV+yUCJHZ/UUp+SjRNTZQvZmK2SZU+sHId?=

=?iso-8859-1?Q?ODnpihp3N0PDjENrMLu2zFgQoYRRjrJ5obSMBOIR2ujBNvepkk9A2//4Zz?=

=?iso-8859-1?Q?Mvggc+UrGb1LlPuQZPLcmi4q3m3fs60lwRDdtismzgSvEHhqzoDCDoZ9eX?=

=?iso-8859-1?Q?B770SYedvtLM7O5xFea6SVQ91klzyJ1W067ga3s/dm8U9rBoul8xgRVKim?=

=?iso-8859-1?Q?9u4T7iweiYAoNVU6JcJB1D8JskksO4OWXGIR+buVDXgaIDmYvicQ4DYscL?=

=?iso-8859-1?Q?mCvanZpxNSDbmQxQLCqFMKpqAHlN4UbShOgGlTwzCjwPoeQcrVplgQtSVD?=

=?iso-8859-1?Q?U2xP5hPTviZzUeIIrYVN5jXyfyUImP/dL1YON+Orbs8K3LPxg2ZO52oas4?=

=?iso-8859-1?Q?aziXB/sbiy3SI1XuvBneO5c8k0IEa51x7p7WS6FvIlIMKj+sjZGh4Zr7EG?=

=?iso-8859-1?Q?OQjGe3wd3KEdA7Y6h7bE8d/RHKXNPJqnajMj+10C3zIIefis17H2Kk6NPe?=

=?iso-8859-1?Q?qGsu3on123D6gxDMknVNzIGQvgmX3Dd3QDmPtAlRV54cn3rAW0yGAqiTGL?=

=?iso-8859-1?Q?2Ee57hrYTyvi2GApdnrwxFTUkL/vxqz8rib/sfR2+Q2s6vvHPJMIrlPnFn?=

=?iso-8859-1?Q?muLY2+LpwrtGZhdGPx4BGNvJ1AGTEoBTUxLSJiqpw9bbrAG6SWxX6uWYM+?=

=?iso-8859-1?Q?HyycKnL9/j9ahZAgEqeHrnKnW7QhJtWvZuAyV4PcQ2z5pi6vpVDH6dUoTc?=

=?iso-8859-1?Q?ZN2Ogpv8dU0smFbHgIdGaBhHwhyyh+p7LyDj6WUmv419Py5VBduG14PSnE?=

=?iso-8859-1?Q?5VgvE3gJ8Pn0jtD/Z2HFdJ2qnVc+3Eas1ofY87X3yMpzDy93CBlri2Lax+?=

=?iso-8859-1?Q?odjJFClRCWvs7z9aPp2nRxMMwKWCY6qaKYLSye0dbIz0m83m0AFwrqRj5F?=

=?iso-8859-1?Q?RiEdM0Wc4/h0H9On+B8lVf6rCpMKquEl13lNEs6pQnw17EnGwBWaBIFKTf?=

=?iso-8859-1?Q?rCjI?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR01MB45752995FD719EFDE4864841BBE02SEZPR01MB4575apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB4575.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: c56003b4-ffcb-4850-a3f4-08dc71ee35ee

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 May 2024 19:11:50.0628

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: OSQPR01MB6089

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi there, Your brand deserves a website that's just as impressive.

Struggling with lagging sales or poor engagement? I get it; it's tough out

there. My team and I specialize in crafting websites that not just look good

but perform even better.



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.53.105 listed in dnsbl.ahbl.org]

[40.92.53.105 listed in dnsbl.ahbl.org]

[40.92.53.105 listed in dnsbl.ahbl.org]

[40.92.53.105 listed in dnsbl.ahbl.org]

[2603:1096:101:7a:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:7a:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:7a:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:7a:0:0:0:9 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.53.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.53.105 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.53.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.53.105 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:7a:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7a:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7a:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7a:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7a:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7a:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7a:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:7a:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[40.92.53.105 listed in will-spam-for-food.eu.org]

[40.92.53.105 listed in will-spam-for-food.eu.org]

[40.92.53.105 listed in will-spam-for-food.eu.org]

[40.92.53.105 listed in will-spam-for-food.eu.org]

[40.92.53.105 listed in will-spam-for-food.eu.org]

[40.92.53.105 listed in will-spam-for-food.eu.org]

[40.92.53.105 listed in will-spam-for-food.eu.org]

[40.92.53.105 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.53.105 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[get.google.rankig(at)outlook.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Elevate Your Website Performance



--_000_SEZPR01MB45752995FD719EFDE4864841BBE02SEZPR01MB4575apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi there,



Your brand deserves a website that's just as impressive. Struggling with la=

gging sales or poor engagement? I get it; it's tough out there.



My team and I specialize in crafting websites that not just look good but p=

erform even better.



Wanna take that leap from 'just another website' to a revenue machine?



Hit reply if this sounds like a game-changer for you.



Best,

Courtney Clarke



--_000_SEZPR01MB45752995FD719EFDE4864841BBE02SEZPR01MB4575apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Cal=

ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi there,



0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Cal=

ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Cal=

ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Your brand deserves a website that's just as impressive. Struggling with la=

gging sales or poor engagement? I get it; it's tough out there.



0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Cal=

ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Cal=

ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

My team and I specialize in crafting websites that not just look good but p=

erform even better.



0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Cal=

ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Cal=

ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Wanna take that leap from 'just another website' to a revenue machine?
>


0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Cal=

ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Cal=

ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hit reply if this sounds like a game-changer for you.



0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Cal=

ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Cal=

ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Best,   



0.0001pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Cal=

ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Courtney Clarke








--_000_SEZPR01MB45752995FD719EFDE4864841BBE02SEZPR01MB4575apcp_--

X-Rated Google Groups Spam JENNIFER <jeanerodedufreine@gmail.com> from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 May 2024 05:45:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5l9P-0000000022d-1uSu

for dave@doctor.nl2k.ab.ca;

Sat, 11 May 2024 05:44:27 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 May 2024 05:44:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f56.google.com ([209.85.221.56]:44522)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5l5g-000000001J3-3760

for root@mail.nl2k.ab.ca;

Sat, 11 May 2024 05:40:41 -0600

Received: by mail-wr1-f56.google.com with SMTP id ffacd0b85a97d-34d7861a1f4sf1540501f8f.1

for ; Sat, 11 May 2024 04:38:42 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1715427516; cv=pass;

d=google.com; s=arc-20160816;

b=OH8hhDyhkUThG+76PijYm6/jX7WZV+W3c/YodOGApZmVn/eHGU8z3fOIR2GPTDypWk

Aa5/RA32N6Yt5eLNWWtkfBiEdjpXLzzgB8lnx9D/qPuBGvRuVNmasOKqAO/VpbFTw+c1

ITiXOnc6qCryhE7Rlj4KeUEq/zqMCqpbzsvrb+KaHHOAXJiRFK75LVUWJJH66OXrxzmY

41YGF+n0SJQod69qPAd3AOhGaNR4+zF6J4g5ZeA1G9XOZ0QICMWHoico7ueaXauQ+BCY

unYToD7LVnlgSq+GkJz6TyqRAyjtutD8yK6WfUTURFDMob8rxgCAODmfAn98ToPYC8G0

Hxkw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=i5ZlEcjF8nlgUXOq0d4E+FIwPJCZkZb/UNd9+vNwjFA=;

fh=1XnfiphlYRdonGWdSwRe4P24lugI73N6vwtGhuKc3QU=;

b=GRPcq/zIsRfDXBHp5bmymBIdyxd0yN2iRVKQca6R3qatmxp6G+kCrkWSzW0UsZBHyh

TQMQ3TISAG8UkAJRMLnJYknS/3L1k0GI36qagW9frSNnIBJmNio+EhBp9jZDkYepvekq

VULkgpqqOvbu6tJIqlLxAtHot2Vt3RJEVEaNqMSzhnDEamniW0sMQAw8lU6gz2ntd5rV

jOpob46e/iVeE81CqseZ/pGJmlyN1IhF8hAGQuKX66BgA/UnxjtyLWqRoJENGTx3/k1O

H+j08CjjbYHV23zVR7F0TSJ5tgXsct8JEsAZ1ZGm882lWAZ52Cos/ZTQTnMgkuwyXMDV

U+/Q==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=WMZgG4sj;

spf=pass (google.com: domain of jeanerodedufreine@gmail.com designates 2a00:1450:4864:20::32f as permitted sender) smtp.mailfrom=jeanerodedufreine@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1715427516; x=1716032316; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=i5ZlEcjF8nlgUXOq0d4E+FIwPJCZkZb/UNd9+vNwjFA=;

b=Zbw3qOdEfoB8GlVpOlp1i1udZ/4oVjKb5QpwyEQcu5FFZUkwgsTkdO3FozKwOgGKXb

VPE4okZ3yVHjvQN/TfUsayHSK8/JJ7AGxTrOMta2L4GJriBJcsiMGdm3GiUg+tNJCYKu

9V+zzE1V7lXSCR0wIKtFV1cHf8uPJOr07SAgQbT5VL9w+yg4buU4QyAZtjeNZmKk6PJZ

YC0UF7r6bfw9gsRgiAFjYWkpteAKorIsDUQn1Y/Ak8yAWlR8iuSTjoRIMAcIL+xOIH+f

aa2kFnoryAtgAcK5+DCQZoU9V0oCWYLWBhHtAG08R04kRyAjHcf8JPTe1HPSWRzkrcyc

6TYA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715427516; x=1716032316; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=i5ZlEcjF8nlgUXOq0d4E+FIwPJCZkZb/UNd9+vNwjFA=;

b=WrA9BnAxfcfkgtb+RoRk7BDlJdFmc9JP/MTVx8MhsSKYo8MWWkQpnpACPEoKNHKGk2

hX7uCtD8w7qkRZXfUY2jGi96V3RvR06mNngZcrxZKr5zbvvmnQFHKJ/XhrRx1Y7hnogE

DJExyIZS022LBf9t6YI6eSllM2gnfqNlXBaQIeDPOazrZTS09rTob6DEdtgfMwUjYlIE

g6gy0hB3FngHNYseP3IfwsG4Ya+s6StkUuEJ3k3i3AQsYik1DgXpj5jOT3Er1hLi07i/

dCoqWophcItb8Ml7/ij75qtYbpytFSboOR+xN64dtZiNlkaVfs3JwaXpoHLKLPsjA9M8

Topw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715427516; x=1716032316;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=i5ZlEcjF8nlgUXOq0d4E+FIwPJCZkZb/UNd9+vNwjFA=;

b=qedc7aUJ+mPTAgm/YAhzHEK6ueIRjHmCWTwge0E+Tg7A2OFEEvIXYaIFsi/zH0giog

s2AzGLsC9CsvL7eLzbJ5XMwbH+Qe5WQnaNGym48HjwZOrhhWc6F0LufNJRU8NOsBu0DO

Ra4RQdxrskooj2yjPlPaNA+n/a5WUffk+6ukvdibdoQwx+4IUPKrHWimsNNTnWEHMHYW

6fgO6h4REx3FFts9wRtu4t4vDvdDMfPQ3+EOKT6X6cmn8u9bznZjfPkYpmFyWLqYFVnf

lkyxSBjdAt5VMMLfazajlC7Ty7HUKfWMchaTkMNv5Hv489SLi626Wb7vrhgomYpFhxtb

NDng==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCX5JvkcnLr2TOxb30YzYCfhR+rQ8DIeaNk3dcK8QwDXMccBJMUs5cf3YzsTTDiUB3awntEyL/gob97O8hhnqMw7pAXC3w==

X-Gm-Message-State: AOJu0YwLRL5JX9Xtwopjt5BNbD/3uFn0X4dUBN6bAxJJPY9kbdZcQqlh

a/r8/UipSFaT2/qo6GVZgJrV5AXl49dTQJ6Wvb/V8rTinZtaRrcc

X-Google-Smtp-Source: AGHT+IHKVPYzD2VFsZ769b2zvxZDmIdz4mpZoxSpP66rnSxe6lwpiKfvsKRwdIAmgg7ghVJhmOmvsw==

X-Received: by 2002:a1c:4c03:0:b0:41c:5eb:4f8f with SMTP id 5b1f17b1804b1-41feaa38a6bmr38644655e9.15.1715427051996;

Sat, 11 May 2024 04:30:51 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a05:600c:1f8e:b0:419:faea:caf0 with SMTP id

5b1f17b1804b1-41fc12f3167ls682375e9.0.-pod-prod-01-eu; Sat, 11 May 2024

04:30:48 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCVdAbd8BUYRtPtmPWkyAliP9s/4kC8QV8yH4iVtueDgJm5kFGyO0Cg1Es6Q4F0voUxSNeO2bhInd24n2ql+e9i5aNo93zRhbYW1/FrZ3c86n8Q=

X-Received: by 2002:a05:600c:24d:b0:41a:7bbe:c3bf with SMTP id 5b1f17b1804b1-41feaa44107mr35098535e9.22.1715427047780;

Sat, 11 May 2024 04:30:47 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1715427047; cv=none;

d=google.com; s=arc-20160816;

b=DGYynn7VyHqo0Uz4a+DLK4oaJyNED2ywbJFy88ESZImuL2jveQuQ1s03ygg3GgsN68

pIYGl5cxLUAXknPklEFpcExbbgkd61rFNF/WMobpjVGHqxi+uj57BnHlpMxdebCA8QtA

4ZxjbYPPqxCOL39YmBl5a3LjekGnuOrRkuuOO22kotfObwsEm8xG4LmmN0aoex2qDbgJ

TWN3W2TD+9xZGsE9tUSIiFXdbXtooyGFSFem5z9psb9UUG8mcc+YSfF/z7vm/9Cd1TdT

OgvYm4Dbiwyk3IFqBuRKCXaw86ZM+jEB0ECHL2osfHmrunyKNJ8yFrEJXQGQTrZlyvYq

2jDQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=+yqQLih1jxzTGVZXCDnvI7EMcevWgYH1qH94E0IshSc=;

fh=4wTU7GcR4fA0P0XHX0Pr/LqJfLrf25PX0SOrNlLtbZY=;

b=GtsF+PIuxGwqdJcQGMq/VLz/ycxk6rA+hYLAxOeH2IyN7RW3YxbKnJlYAu4emWTWsy

jFYr2JH7Wqi4H3w6CrLjXPhJOJJHHXFf6Q/RUWCEDt7xlmz99xffLxhYLh7nNLprS8eE

NssAAwA86P9J/BHhq8hCLBTVOhX7hThlKf3E3ZYcRuI76reeJofRwihW1hbhG0K6eYLg

WCqCh1UTU+YIC4xgnlBYMY/pva34BP2/qt5EzvMCcMX/MmGRfVtVR9N6A/i1WJNx/ACR

e98ZXBeBCQIyeuE5gEUhvmMvp3bNlgVT8eZkAHZecH0YTBHn+HnTYcnTtmAZa+QH8Q/5

/Uyg==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=WMZgG4sj;

spf=pass (google.com: domain of jeanerodedufreine@gmail.com designates 2a00:1450:4864:20::32f as permitted sender) smtp.mailfrom=jeanerodedufreine@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-wm1-x32f.google.com (mail-wm1-x32f.google.com. [2a00:1450:4864:20::32f])

by gmr-mx.google.com with ESMTPS id ffacd0b85a97d-3502bd16428si130825f8f.6.2024.05.11.04.30.47

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Sat, 11 May 2024 04:30:47 -0700 (PDT)

Received-SPF: pass (google.com: domain of jeanerodedufreine@gmail.com designates 2a00:1450:4864:20::32f as permitted sender) client-ip=2a00:1450:4864:20::32f;

Received: by mail-wm1-x32f.google.com with SMTP id 5b1f17b1804b1-41b79451145so20432855e9.3;

Sat, 11 May 2024 04:30:47 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCUNPDdg7VmN2DTvH7Gk5ANDSSc8RAIN0pSiQm74MnsMDGj3GQbLuk+xqxzZDn0MvWzp9187ntdKuLRa802sAIwB+CO0c8vR0Vx5H7y3edQ4zWQvwgOqVkjLPgdMYahOjwBS0vZL8ddgDJdUX6CguAetd7nBrfXFuFwiP47+7ZAnbSNV5fWWnqejjpEZt+ZjItTcvA0mg/5NU+g/QmuNMHpKIARDyJT+Y5R/Ps0RU+ca54aAtZsOYlM1Fj9606WL8+TAM+kvLPJF3sonRgCCoHVGALyd5Z3VNwriVhq2BvEwJej1U7Usta8Y4MPG1CzwnKxsOkrDyOddFx7q60ze+o9IUqQns8b4Y54cYFCez6lFD6LYAw32sDgRcyRZdQcCIKyvERVIXYUnSTeLBdXBm6w/kSWfZUdyTNlQ5swAAcZ0GuLDKX6ZbZWbIMWRhHqHTPiFtu0WLT9zNZQBehpm8i2Bad4+HoKWliY4

X-Received: by 2002:a05:600c:1c9a:b0:41b:8660:c530 with SMTP id

5b1f17b1804b1-41fea932021mr43304725e9.5.1715427046838; Sat, 11 May 2024

04:30:46 -0700 (PDT)

MIME-Version: 1.0

From: JENNIFER

Date: Sat, 11 May 2024 17:30:32 +0600

Message-ID:

Subject: Would you like to meet f2f?

To: dece15-912016742@googlegroups.com, dece15-912016917@googlegroups.com,

dece15-912017260@googlegroups.com, dece15-912020230@googlegroups.com,

dece15-912020772@googlegroups.com, dece15-912025199@googlegroups.com,

dece15-912025586@googlegroups.com, dece15-912027395@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com

Content-Type: multipart/alternative; boundary="000000000000c3e3df06182bfbfb"

X-Original-Sender: jeanerodedufreine@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=WMZgG4sj; spf=pass

(google.com: domain of jeanerodedufreine@gmail.com designates

2a00:1450:4864:20::32f as permitted sender) smtp.mailfrom=jeanerodedufreine@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 11.1

X-Spam_score_int: 111

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey, I am looking for an NSA hookup that would love to pleasure

me. msg me-) 🌐 https://sites.google.com/view/nswe42 it's totally free

////////////////////////////////



Content analysis details: (11.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2a00:1450:4864:20:0:0:0:32f listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:32f listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:32f listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:32f listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:32f listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:32f listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:32f listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:32f listed in]

[will-spam-for-food.eu.org]

[209.85.221.56 listed in will-spam-for-food.eu.org]

[209.85.221.56 listed in will-spam-for-food.eu.org]

[209.85.221.56 listed in will-spam-for-food.eu.org]

[209.85.221.56 listed in will-spam-for-food.eu.org]

[209.85.221.56 listed in will-spam-for-food.eu.org]

[209.85.221.56 listed in will-spam-for-food.eu.org]

[209.85.221.56 listed in will-spam-for-food.eu.org]

[209.85.221.56 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.56 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2a00:1450:4864:20:0:0:0:32f listed in]

[dnsbl.ahbl.org]

[2a00:1450:4864:20:0:0:0:32f listed in]

[dnsbl.ahbl.org]

[2a00:1450:4864:20:0:0:0:32f listed in]

[dnsbl.ahbl.org]

[2a00:1450:4864:20:0:0:0:32f listed in]

[dnsbl.ahbl.org]

[209.85.221.56 listed in dnsbl.ahbl.org]

[209.85.221.56 listed in dnsbl.ahbl.org]

[209.85.221.56 listed in dnsbl.ahbl.org]

[209.85.221.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2a00:1450:4864:20:0:0:0:32f listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2a00:1450:4864:20:0:0:0:32f listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2a00:1450:4864:20:0:0:0:32f listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2a00:1450:4864:20:0:0:0:32f listed in]

[dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.56 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jeanerodedufreine(at)gmail.com]

2.5 SORTED_RECIPS Recipient list is sorted by address

2.3 MANGLED_MEDS BODY: mangled med(s)

0.0 HTML_MESSAGE BODY: HTML included in message

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} Would you like to meet f2f?



--000000000000c3e3df06182bfbfb

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey,

I am looking for an NSA hookup that would love to pleasure me.

msg me-) =F0=9F=8C=90 https://sites.google.com/view/nswe42



it's totally free













































////////////////////////////////



--=20

You received this message because you are subscribed to the Google Groups "=

Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an e=

mail to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid=

/dece15-912025586/CAOZuyxh%3Dg3WUvwzEYsLSMK48cHE7ry8GQD43uQctE%2B0JT_YQcg%4=

0mail.gmail.com.



--000000000000c3e3df06182bfbfb

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey,
I am looking for an NSA hookup that would love to =

pleasure me.
msg me-) =F0=9F=8C=90 =C2=A0
.com/view/nswe42">https://sites.google.com/view/nswe42

it's =

totally free















>






////////////////////////////////








--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com.


To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CAOZuyxh%3Dg3WUvwzEYsLSMK48cHE7ry8GQD43uQctE%2=

B0JT_YQcg%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://=

groups.google.com/d/msgid/dece15-912025586/CAOZuyxh%3Dg3WUvwzEYsLSMK48cHE7r=

y8GQD43uQctE%2B0JT_YQcg%40mail.gmail.com.




--000000000000c3e3df06182bfbfb--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Ukrainian dating spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 10 May 2024 15:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5Xlg-00000000ERf-2ZfL

for dave@doctor.nl2k.ab.ca;

Fri, 10 May 2024 15:27:04 -0600

Resent-From: The Doctor

Resent-Date: Fri, 10 May 2024 15:27:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vi1eur04olkn2023.outbound.protection.outlook.com ([40.92.75.23]:11086 helo=EUR04-VI1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5WH5-000000002lR-0EeB

for doctor@doctor.nl2k.ab.ca;

Fri, 10 May 2024 13:51:27 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Xsqelr51+7A7P9uQDdfoUEnGUs5LHpCkBkCrbz2rkj3Ca6jJeNvUJFq38Zj42RGNBp0DUKL4Tc+Gsw7XPqEMI/3xygBlNMY1D9XZLptbK1rRUT54UlPvWgDTVkIKLaFejKK1vU+BBaXuvHFXnpKSOWMUiC2mtMhsa7h2OobVxjfK3dLf6r08A8gJmxN/VpscjU/fgRQEK/Rwv1RQzPODWdTWz93DjgEXDQBA/0p/Abjt8NwJZ8atY2y8f+4YKyjelIXxulzdiiInE5UItICeQfGMwR0XRyUFoh+ddpBsNypDq1kilNhTlLv6l3tWZLk51uMahF3Nj1I6IbvRNvUfEA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=NzAn9hHl4yqmWrcAiS1IvU2SxZmPbd87uJmVl846YtQ=;

b=SY/yxhUagfUJT5WfjB0bXZJvUc5yFeeCIHDad91mrAaOO2MZ5vYCwIZzFSUJ+VdhZi/iYX92DAnlVDEtAeId+EZaYLi7aOPDAEjFJG+SkTB1TJkaixVsqX8euv4ZhQ8X8GdRKha3w7W8n9EK/QxTRXgoER5ppiHA+AY/zHLeqRmbgt5ErxS7o66vypP0Z5cDcayQR5tWqGZ+fArL/F6d6Ar9MDd8KEan/+lmNdF2cEk2nYW9dEalmz2s1lb9dt/V+v2ULDiu8A9pWzGdkJ/86Cyrd09j6JYcNYVpdJH6Tn9+lbV+kastlSSAo7s/07LYQSOxhJtxaHXY4fra8pxY9g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=NzAn9hHl4yqmWrcAiS1IvU2SxZmPbd87uJmVl846YtQ=;

b=K4YEMwJj3iic9V1tOqV/fudDqI4fLyzZukLZfGxvQYdXokKZPmRyqZf1vbcf1X/Ayy51oCIgQI3PQdunD61SxH41Ga9tH55grruZ19JTERY4wlHE35zL0ljI5beYvVCfqu56Itaqpz3jvL5VlkIE6Dfv0V2okvE4MF4RAwMIPCfD3qYc1D0KDvY0sFc6xuPF/1hrLhtDxpgVkC/Rq3C9u86GZJ8JBw0KqFG4jPpUyuNzDhO5a9ZB7dQVMNEW0I4kshxmxAwN9grsQUhXRjoexkQz6fGIQ+WeYnpDyQ1OXUCZu6uUvtw4AiRcTKfRmDqkjqeCt3i7/md9/zofKFb5oA==

Received: from AS2P192MB2223.EURP192.PROD.OUTLOOK.COM (2603:10a6:20b:645::19)

by GVXP192MB1806.EURP192.PROD.OUTLOOK.COM (2603:10a6:150:4::19) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7544.46; Fri, 10 May

2024 19:49:03 +0000

Received: from AS2P192MB2223.EURP192.PROD.OUTLOOK.COM

([fe80::d42b:7251:42de:153d]) by AS2P192MB2223.EURP192.PROD.OUTLOOK.COM

([fe80::d42b:7251:42de:153d%3]) with mapi id 15.20.7544.046; Fri, 10 May 2024

19:49:03 +0000

From: "me.karima@outlook.com"

Subject: =?UTF-8?Q?Charming_Ukrainian?=

=?UTF-8?Q?_singles__=F0=9F=8C=B9?=

Reply-To: "me.karima@outlook.com"

X-Mailer: SquirrelMail

Date: Fri, 10 May 2024 21:49:00 +0200

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_964C_7111429C.3D5562C1"

To: Undisclosed recipients:;

X-TMN: [u50ZAFpvXgnRxQyQuJjs/OmFbkYAaJVs]

X-ClientProxiedBy: AM8P189CA0021.EURP189.PROD.OUTLOOK.COM

(2603:10a6:20b:218::26) To AS2P192MB2223.EURP192.PROD.OUTLOOK.COM

(2603:10a6:20b:645::19)

X-Microsoft-Original-Message-ID: <1.87a6ef81d830bafd6804@DESKTOP-9I3498I>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: AS2P192MB2223:EE_|GVXP192MB1806:EE_

X-MS-Office365-Filtering-Correlation-Id: 6c476c5d-79c6-4b2f-85e6-08dc712a3d63

X-Microsoft-Antispam:

BCL:0;ARA:14566002|9400799015|9000799038|42300799006|461199019|1680799042|3412199016|440099019|4601999003|1602099003|56899024|2406899030;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?N1MwOE54SmN6ZS9ITk5zY2JVTWZDQWEyYm0vOVF4ZFBJakdmQ1V5bmdnSmVR?=

=?utf-8?B?NndvVTBRcEQweG9HYkxSVklNMmR6WEF2Sk14MzBtd29LVXJkbVJjN0VhNzNo?=

=?utf-8?B?OWMxbE0vN3JZK3RXWUNBRUpXazY5Q0k1M29hR1RUeEtBVWlpaS9neWRqdGZM?=

=?utf-8?B?ZzdLdDFJN0U5NWFOKzVxTXhmYWUrVHp0SE5JaTBGQytQTmRXL2RQNTRoWTRv?=

=?utf-8?B?SWI4TXU0SXNLeEhKc1RSYTJFeEN1NXp4ZG1SemEyaDBJdnhNOXlkZlVOT1dU?=

=?utf-8?B?YjlKZkI4eDBPSUJCOUF6RHFsT0tlRGJxMjBxdDN3dEhvZ2o0K1JsaVFsVStv?=

=?utf-8?B?d2wzSE9YcDJBcitRelBmL1BNVTRZVFJZUTRKc29PT2s2bGRIZjVyRFJoSG40?=

=?utf-8?B?OUtoam5CR1F3NUlNcUNORzljNjRqTnpzQTVZVEpKeCszOERpT1hmeW5weWZJ?=

=?utf-8?B?cFo0eUhHWU5jZm9oSHlqVFkvYzkwN0EwVWZxYTZhaXpjQ2VQc1k0TGVOSU45?=

=?utf-8?B?NG5ZS2tCUVhJMTg4OFFmYzRkK1dZYUxOdENWNE9SK0JnKzRpN1RaaHVFbE9s?=

=?utf-8?B?c3lNcnVlR21SdnVwODk5ZnUxY3ZtTnZkU291VjJFaUZDVXZwY0FLZS9UOTVW?=

=?utf-8?B?RjZLK0tMT2RZb0JieXZSOXduclFlMFhscGI3WmVlRHlocDJyWXY1a3daUzJt?=

=?utf-8?B?UlEwRUhyb1Rqd2VITi84U21uQkgzVGpaWVhseW51TzkwK0hscXdLZEt3L2hM?=

=?utf-8?B?Yjc3aEt5ZzEyZ3dvL3lqT2Z3NUtSSm9jQlR6R2RqZFFqeFo1RzJPek5NV2Zl?=

=?utf-8?B?OHF0a1BRbC9GdStDemdQSjBpeHd4NXhJNE5iSTZpdnlabytodUkvcmw0QnBY?=

=?utf-8?B?R0xSdEpRSytNYlRJQTltM04rMi9vMTFhZFovVFhlWXNDYnFTcy9wMDN3bko2?=

=?utf-8?B?Q0F1RVlSWFRvdGxYdHVCTVpxQmh5OWorZnFEeUNqTDBqY0FUMTBsN085Y1lJ?=

=?utf-8?B?WjJ4NXI5eE0zclc3MjhMTW1VYnF4ZnNXRmNZNm8vYVBSSUVzajRzc1dLNzlK?=

=?utf-8?B?VVoyNExpTDBTR005TVUvNjJqYTNaTzBQVnlNMmlLaWMvY0lGc1pYNFdMZVc3?=

=?utf-8?B?ZlhBWCt3RE9CNDdDaWFuZFVkQUtSUlBLa0pWa0tEeEQ5M1pKMTE4NlIxSlUr?=

=?utf-8?B?b2cwWkFpbE4xQnVXL2RUZVJvRkFhMlJLK3MwVnFTZkQvaEhSbDB5MjNjZThZ?=

=?utf-8?B?dXM0ZDE1MHkrQldQMmVMK0RBMGZGcGVaT1c5dUp3bGZRQ3A2S0s2MVdVVmUx?=

=?utf-8?B?eUhGU3V4QTRMaWhuODNJeUZQVFBudVVza3JZY0pkNGNaQVcxOU1QdTNFYUFY?=

=?utf-8?B?dUR0VjZkcm50Slc5cTQxVVkxUEJwaDhja1JKWGJPYytNSEhGOG9NeEFXbjd2?=

=?utf-8?B?cUVuaWJJdG42M0RsSjN0b2VteEFHNEhZcnBGMnIvWDk0YzFJbGNHKzlqejVX?=

=?utf-8?B?L3VBMEYyVXppZjU2VFBGMmNLbFhmbVZZMW9lVk4yYmE1MGE0UjhjbUlBK0Vm?=

=?utf-8?B?K2E4cjFOb0ZwWk9lejEybUVDd0Z4QWxKbUJvZVBTWDJ5OFBaZmZZdC80UVAz?=

=?utf-8?Q?kKP0f8x0xz3j3ks42PEdixBzWeM5rw/d6e998PAb8Wh0=3D?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?L1A0Mjg1VHdvT3Y3eHNQaW1ldFUvL3dnd2k4dEROVmMzZTFLWGgzeHNna1NV?=

=?utf-8?B?TEtzNnRZdENTNU1vbjdZSEMrYVd3N01JSk9IM3krdGdwTTZWMDlIT2l1K3hD?=

=?utf-8?B?aVM2K2dHZ0s4cGRkam1FY00vaW9MdWFYOHFSR08yNjU4cElWWnM2VnY3U085?=

=?utf-8?B?eE5DVUoxZEZONVVMNjhHRHlvYVlnenA4bXZUUFdFM1JGeUE1Z2N1bWdDZTlG?=

=?utf-8?B?OFpZN3dVdDhUczRWQ3RhbG8xT0dLdlUyaXZ6RzQxZ1daZWFpWERhcm5BK2FS?=

=?utf-8?B?SXY5SUVzMXhBS1dnYmc4bnNVcDZsRUhISVRyZklDeXN2Qk85RW8rTzF4Y2xp?=

=?utf-8?B?ZVFJK0s4bXN4T3lqTXRpRTlid1lCNzh1Y1V5WFc0M2tCNWo0WStFUTNTcC95?=

=?utf-8?B?eUMzcWRaZ0dSamJWOGxWZjhDbkFwSnRmSHA3RWJZSWlkVEZjQ3pTZVRPMk1B?=

=?utf-8?B?N1k4a0VFZUNRajVvQUQwTDJOVXRMbkh6Mit1UTlsVXVvSnFwU0F1bUZ0cXdB?=

=?utf-8?B?bHk1UDQvZHV1MXJWdmdjME1Hc2pKWWJXY0tDMWlyUjhQVVVVTEIyaEc4TkNw?=

=?utf-8?B?ZTNpa1FBVkdHY0M0VE53NjRpOVZGSkNxczNQR0E1MksrWUZBUjJVcnRKeUhK?=

=?utf-8?B?Nm1raDBnT0RvOW54RUNoQ1JTbm9HMStTLy9VUkVtRVJ3Z1VrNVR2ZHNJeEJJ?=

=?utf-8?B?emQ5S1ROL3RBcnRYVUdpcUVhdFp5ZDlDZnFLU2E2dVBUS3M4NEhPSFh6ZHE2?=

=?utf-8?B?b2cwdGlTT3ROZlZrcnNjaWFuODYycTgvQzhkcEd0RzQ3T2NlM2lvaTZrMWpq?=

=?utf-8?B?M0l0UXhKTkdadjBzRW9LbUw1OGxRQmZPZXROUSs0WElrTjNCVVl1RzljY2Zw?=

=?utf-8?B?c3lDNlovSisyUjJSa0QrcXpPTGhqSzh1R2RrTmh2NndIRTZZd2FBRDNMWis2?=

=?utf-8?B?bDBTa2xnR1dkVVo1S0hEeGJvKytyZHUxNGdaQ05uTkhuUncrcmVkMTdBUVUv?=

=?utf-8?B?U3BsWEhDRFlWSS9zZ3B1RmFQT0x4QVlFTnBwQ3JSbTByWVRXQnJ3Ly9MTUVy?=

=?utf-8?B?T2E1NHl1YTkvVVFKcnpCQlpxY3M0Q1RRTWJCUlhkMVUyR1Zwd05WQjcyWjYx?=

=?utf-8?B?d3JHbGhJMjBmVXBlTWFVYzNlbGpGN0Y1ZHdhRXFJNXJKcDdYVXl3N2ZJS05W?=

=?utf-8?B?R2NhUUt5UHBiaTJEeHU4TkZFVDZIcDk2Q0hZUXAyL0Vxb2RXY2JKVzZhSXNi?=

=?utf-8?B?YXIwanp4RHlVc3VNdUZMTFVWYnNvUjkzYlVjTzFER1FuTk85c2QxZFdQOFU4?=

=?utf-8?B?a3JRak1IdmlqUWgxNWM2VkxIUzZkbSs2TmVjNW1uc3E3M0xzSnFRbWhzOTcx?=

=?utf-8?B?Z2x0MFJoM2pTbW9aMXhRWG1XYXdzdXZSTGhwRFhWUU5mM1U2V2RhcWM4OGw1?=

=?utf-8?B?U0o1TCs5SlRyOUl5Uk9hU1NQN1NRUCtrM0lCSW1KNHRSYXE3U0NyZ204RDJj?=

=?utf-8?B?bXhJYldZWmllNlo5T1J2cFVDSEI1OFovWHJVakN1L2o3dmI2N3RvOWpBcklh?=

=?utf-8?B?NEc2VVRXVVUzdFJZbUQzYWVHUHZOcUlKdFY5V2VkcGxwdy9KeHlqVW9vN2RD?=

=?utf-8?Q?uedLnzU35m9q6NgLPRDuPL41LISGrmwZpwNh7XAmm6q8=3D?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 6c476c5d-79c6-4b2f-85e6-08dc712a3d63

X-MS-Exchange-CrossTenant-AuthSource: AS2P192MB2223.EURP192.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 May 2024 19:49:02.6056

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: GVXP192MB1806

X-Spam_score: 11.7

X-Spam_score_int: 117

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Discover the allure of Ukrainian beauty on our dating platform.

I stumbled upon this Ukrainian dating site a few months ago, and it has completely

changed my perspective on online dating! What sets this site apart is the

genuine atmosphere it fosters.



Content analysis details: (11.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.75.23 listed in dnsbl.ahbl.org]

[40.92.75.23 listed in dnsbl.ahbl.org]

[40.92.75.23 listed in dnsbl.ahbl.org]

[40.92.75.23 listed in dnsbl.ahbl.org]

[2603:10a6:20b:645:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10a6:20b:645:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10a6:20b:645:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10a6:20b:645:0:0:0:19 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.75.23 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.75.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.75.23 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.75.23 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:20b:645:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:645:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:645:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:645:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:645:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:645:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:645:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:645:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[40.92.75.23 listed in will-spam-for-food.eu.org]

[40.92.75.23 listed in will-spam-for-food.eu.org]

[40.92.75.23 listed in will-spam-for-food.eu.org]

[40.92.75.23 listed in will-spam-for-food.eu.org]

[40.92.75.23 listed in will-spam-for-food.eu.org]

[40.92.75.23 listed in will-spam-for-food.eu.org]

[40.92.75.23 listed in will-spam-for-food.eu.org]

[40.92.75.23 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: clck.ru]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: clck.ru]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: clck.ru]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: clck.ru]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.75.23 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[me.karima(at)outlook.com]

0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 AC_BR_BONANZA RAW: Too many newlines in a row... spammy template

Subject: {SPAM?} =?UTF-8?Q?Charming_Ukrainian?=

=?UTF-8?Q?_singles__=F0=9F=8C=B9?=



------=_NextPart_000_964C_7111429C.3D5562C1

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Discover the allure of Ukrainian beauty on our dating platform.





I stumbled upon this Ukrainian dating site a few months ago, and it has com=

pletely changed my perspective on online dating!





What sets this site apart is the genuine atmosphere it fosters.





Join today





to connect with charming Ukrainian singles seeking meaningful relationships=

. =F0=9F=8C=B9





















































































We're sorry to see you go! If you'd like to stop receiving our emails, clic=

k the link below to unsubscribe. We hope to see you again soon!











=



------=_NextPart_000_964C_7111429C.3D5562C1

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-6c3d7b5a-7fff-0311-=

4a4b-ea53d8493fb0">=0A=


argin-bottom:0pt;">=0A=


f;color:#000000;background-color:transparent;font-weight:700;font-style:nor=

mal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-=

space:pre-wrap;">Discover the allure of Ukrainian beauty on our dating plat=

form.=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

I stumbled upon this Ukrainian dating site a few months ago, and it has com=

pletely changed my perspective on online dating! =0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

What sets this site apart is the genuine atmosphere it fosters.=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ne;">
5cc;background-color:transparent;font-weight:700;font-style:normal;font-var=

iant:normal;text-decoration:underline;-webkit-text-decoration-skip:none;tex=

t-decoration-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">J=

oin today
erif;color:#000000;background-color:transparent;font-weight:700;font-style:=

normal;font-variant:normal;text-decoration:none;vertical-align:baseline;whi=

te-space:pre-wrap;"> =0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


f;color:#000000;background-color:transparent;font-weight:700;font-style:nor=

mal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-=

space:pre-wrap;">to connect with charming Ukrainian singles seeking meaning=

ful relationships. =F0=9F=8C=B9 =0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ne;">
serif;color:#1155cc;background-color:transparent;font-weight:700;font-style=

:normal;font-variant:normal;text-decoration:underline;-webkit-text-decorati=

on-skip:none;text-decoration-skip-ink:none;vertical-align:baseline;white-sp=

ace:pre-wrap;">
den;width:271px;height:341px;">
.com/AasiLWnhXu9HUB9E-GRCUnAyLfrgMUI3JVrQQIrP2BmOlwT_nsfdebD-xp15OnQDXbK43T=

iTtJTEeyj7VpPgRSrwYRL-hft0o0tls4yX_Tdy1YjzH_cxM3A-D78gd3nFMQptDcXCb29yODOYz=

MdPIL0" style=3D"margin-left:0px;margin-top:0px;" width=3D"271" height=3D"3=

41">
:Roboto,sans-serif;color:#1155cc;background-color:transparent;font-weight:7=

00;font-style:normal;font-variant:normal;text-decoration:underline;-webkit-=

text-decoration-skip:none;text-decoration-skip-ink:none;vertical-align:base=

line;white-space:pre-wrap;"> =0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


rgin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

We're sorry to see you go! If you'd like to stop receiving our emails,
an>
style=3D"font-size:6pt;font-family:Roboto,sans-serif;color:#1155cc;backgro=

und-color:transparent;font-weight:400;font-style:normal;font-variant:normal=

;text-decoration:underline;-webkit-text-decoration-skip:none;text-decoratio=

n-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">click the li=

nk below to unsubscribe
Roboto,sans-serif;color:#374151;background-color:transparent;font-weight:40=

0;font-style:normal;font-variant:normal;text-decoration:none;vertical-align=

:baseline;white-space:pre-wrap;">. We hope to see you again soon!=0A=

=0A=


=0A=


=0A=


=0A=


=



------=_NextPart_000_964C_7111429C.3D5562C1--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

X-Rated Google Groups Spam =?UTF-8?Q?Boursiquot_Ana=C3=ABlle?= <anaelleboursiquot633@gmail.com> from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 May 2024 05:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5l8W-000000001vJ-3Dbb

for dave@doctor.nl2k.ab.ca;

Sat, 11 May 2024 05:43:32 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 May 2024 05:43:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f64.google.com ([209.85.161.64]:50300)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5fhZ-00000000BJj-3UQg

for root@mail.nl2k.ab.ca;

Fri, 10 May 2024 23:55:27 -0600

Received: by mail-oo1-f64.google.com with SMTP id 006d021491bc7-5aa350b43ecsf3456157eaf.0

for ; Fri, 10 May 2024 22:53:26 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1715406800; cv=pass;

d=google.com; s=arc-20160816;

b=DULVThlImn+nvnt1hHfnn5KqsOQcwcbX6EzBTPcJBAfkTg0wMm6nUZY75D8mDCw3uN

Q0UjVRXBt+D7wl5+P/eLS8A0+Q0sPtnPPRegsEum7Jwm85+gPs9dT51DD63kke7Vmn+d

V5l4+9DLX2YGkmlqVW6/Mq7TVRI+ky15HyfahsO+P9t/jFgXESOCQuDQ7f0xb8tnRIFm

PYjDsEepzn4cfkkgpHlno/62/7aoNFRMail9HaO7F1L9G/VWV0Bmwia825fUUVqHbDe7

+9+DlbeElH4p12sXxuEfLuvPp2Q9S2h+gMuY1UrVSRdpglCXZaACbUu+V1P6GOnKMi39

EFoA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=Q+iI4SA4u8K8C82vxoPEYdMVHudVG8+ZbrX1Fzp59r4=;

fh=24KjskG0BCwBiR+Ue5HfevXmS67zjjpqBhfIN5tEzrE=;

b=SL2yKKxl/ucwT/mhaJJDQm/KXYygTX6Jq96RVS0TKwcXQLC9XrSeb43W3OAy3wdPzi

/QB8uxR8Nc75z9FC9DTyrKtskxM8vZr7kaur+jK7lom4PEvkthnuZCfSLpx03UIy5Tnn

H1XNHlfAAmuQPEIkpO5FkBzQjLNxLRiNqH/W1QITcuyUSaLuXLak9GrdEX945WSy2nZR

kiDToq9qlRkKxRsN4NNPQyJqSFpHDuPWogTymbe7yGGfejyrQUXVJmgBbivxdMuAJHqy

GfhBEKZyEf1hcBNlxi50tXWtoAKszUzKhMx92c1KgpJwJRXAd/w6B73RKoBCEmuPFyme

JUQA==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=Unh386St;

spf=pass (google.com: domain of anaelleboursiquot633@gmail.com designates 2607:f8b0:4864:20::732 as permitted sender) smtp.mailfrom=anaelleboursiquot633@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1715406800; x=1716011600; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=Q+iI4SA4u8K8C82vxoPEYdMVHudVG8+ZbrX1Fzp59r4=;

b=i/G9NItmwBqbJRR+jMliN5RX1ZLkc9y9r23ns1kL4lVSjRvDx9/x0zTU+gWHZOOP0/

FEDZZpC986cCopIzRjJRTQ77/6pXiEB68FMWccb+38LrDpWajlTXnn93Fp04cFH2htdN

gYdhhQtmj+yhOQoyWpfrrmZu/tY3uPszt3zgPreSC2apCt/TIt6cnn6ZxTNJ3n7caUhl

FegEI/EUcP6IaoYADpUrEg3BZsO4nLYEuFEpLEIurX5+P4GytV8otTjrHcmxG/NIiMMy

rM371Tct2G09AS9MhAF9EVOR6hBv5OB/6Vh2aJsHtDvrvW+K1B2Mf3DP7ouu3XEqIzrB

LyCA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715406800; x=1716011600; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=Q+iI4SA4u8K8C82vxoPEYdMVHudVG8+ZbrX1Fzp59r4=;

b=ZY9vDLdbERGphpCDz4pi/c3Na1gQJavo1A5HDSN2poTtMRdYdjYHw9IAjJ7QE9VGuB

o7vp3qtf5PMp2kO1jOvMo6q5JgERbuEWjIzULYMdy5eZnli7YTo/Hl5sQbn74ff+ZYP3

CvYc5ntwbLNtNZpam98VBwa++pFJyuureU+s7yWsvsxPxM7DjNfrH3/rBKJIg9J3wKel

UtmFSmVXd8CZZquafyM3t6ltW8yEvvo42uqdy5Ik5iJcB24pxYVr/P2mg9uLZhInuiDE

wR7DkO7bssC2nIMWf7/tk4UME1Aj1SRHk1rHu8i1orBWTpohtkhfghWVk68A9EM+x0W7

77uQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715406800; x=1716011600;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=Q+iI4SA4u8K8C82vxoPEYdMVHudVG8+ZbrX1Fzp59r4=;

b=POxIMo2OYotvd3EBAzTYrUIKV8/j6Plc1tsrWFgCAiD7M/JNFIDVwD7o7VgtAHY1Gd

y0hjzWBVULxhLOK/gs5F1n0gfH+V1V0stZ96ywQrW+D+UNnb3Z7BrWc+tPdKvJyjxxim

PUDgAg+A/t5jlJawWSVh5Rixiahd9RpVSk0PPgbBdZUcyP/i/IYtWYMF6tyvf+lp0lsV

4nArowkSd5BgTq/pEJrN7VdcJac5B0KHB46T48dNQcYBeilGKvb25fb+bJMcEenCtPiZ

IfBq7BmK5dyzSgO4YZy9SNEKAWsZnyKOEJhGakvvkzpicVqqazRmCqRX6CGAMDd3yveb

ktSg==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCVDbbDJRoOgWFQI66tZvaAyIPyStuCzTbKXw/3B/tUoJaJnvkiebhSclea262uXZs4nXtfy07A94y62LFYO69cLsEcOOw==

X-Gm-Message-State: AOJu0Yw7q8KIOoHJ5lL2G5ls35Q68Hpj5htVGl7ZmJnmExbfH6eVQNAt

9H3TFskB4IO5V+49N62pBSGS7QRbDuaQgnngoYq/H75AoWiqZeST

X-Google-Smtp-Source: AGHT+IGzylt5xAwi01VAEVncLSXYH740oJeE3fXgPFzJFZvhoYuKmANsCXTm3AWNZP0hZAgQTEj0HQ==

X-Received: by 2002:a4a:907:0:b0:5af:4b39:b7e0 with SMTP id 006d021491bc7-5b2815cd612mr4450323eaf.0.1715406800570;

Fri, 10 May 2024 22:53:20 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a4a:58d5:0:b0:5b2:7612:b497 with SMTP id 006d021491bc7-5b27612b5b4ls2734114eaf.1.-pod-prod-04-us;

Fri, 10 May 2024 22:53:17 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCXFWypkJ5artFGhZo19Pi4imq/UlouR6nG5sPs/t+a/ZdWoLvqUwkDrFrW5/ObbgDVUg9s/hqZfWHBVKla9lhqnYU+qeXX8yrVS7f9QxdonDXQ=

X-Received: by 2002:aca:2214:0:b0:3c9:6d23:fdd7 with SMTP id 5614622812f47-3c9970631e8mr4550004b6e.24.1715406797587;

Fri, 10 May 2024 22:53:17 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1715406797; cv=none;

d=google.com; s=arc-20160816;

b=BnCOoXtvsKLtXbgHqUwNLz76MtizWTU/BtXhjT+ZMGSs+0ImZ/+y9F3Vn/V76IM4He

/UbJW1FEJUeIMYKO1BVEn7dvAQKANNJR7eNMxmQU3bwhPVgq/apO4EfgU/eoCaY68tNS

lpz6q2tBuv38Q2/PXtmMCUuCiJ9dyJZ0QSRIAMalNZ224ZbLyOpmjpllgs890Yc9FfeW

+1hMV5rrtuGx4fLoGX4U7qypitesR2my/eCVo9bN6GDm841P+3Tr6JXxDmmoIGiWorZd

VpxIb7SJ5yCs7gUoTduKXv8/1lZ+ZoMNaJPaKUXFhsowGdvK7BWyb9OayC5IrKECU0hS

3Puw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=iGdXXBokK4bxJt2Bo6kygBKdGg71/FZar/RtvVopZX0=;

fh=cByFMYREQayZ4FEDjhiuSbY14+1GpDZG6JB+kZmDWp4=;

b=AabpPk11Fc0dECH0vM7E/QKedso51sRbjjEfpbDU2oIqh+gKBCeSd+Xy/ylOGBVhag

JbV2esFcreVgCi8htDcGTe7fYHZmbU8wBaOyxlBiYhp2iI36A8S7e+qaku9xHLKg2TvM

ew6ReaaESl8CJVbeehtzxNJc255YxXOXdeQhMfVdhwwMipIITF5Qi+8S3vyznFND6c1k

MOo9mWhgkjKz4MIpamzbtelvSlwnStcdvUc7FTVmCr75hf2Q98KNGtSvOc2UGVZoi0/C

eLgm2t0fo3XIIyKfcFMX9lCV+EzBdnKyURlpgYVlVsDRrazFLKakKw6eePiM5gBzFlVz

1GyA==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=Unh386St;

spf=pass (google.com: domain of anaelleboursiquot633@gmail.com designates 2607:f8b0:4864:20::732 as permitted sender) smtp.mailfrom=anaelleboursiquot633@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-qk1-x732.google.com (mail-qk1-x732.google.com. [2607:f8b0:4864:20::732])

by gmr-mx.google.com with ESMTPS id 71dfb90a1353d-4df7bf99effsi609165e0c.2.2024.05.10.22.53.17

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Fri, 10 May 2024 22:53:17 -0700 (PDT)

Received-SPF: pass (google.com: domain of anaelleboursiquot633@gmail.com designates 2607:f8b0:4864:20::732 as permitted sender) client-ip=2607:f8b0:4864:20::732;

Received: by mail-qk1-x732.google.com with SMTP id af79cd13be357-78f049ddd7dso190522285a.1;

Fri, 10 May 2024 22:53:17 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCXKhTG/yC16FOUrpH9H4YOUrFIERLd0YCzJaOnUNiuJYnZIpKT9ipIrdAs8IMZRk/YSOJuSdLDGP5CwJV4r/1hfFeiCkKVZgR0gcCxNHERWnG9D3p5rP6IL4hpyWSnm7C14nVN+df5Ev8Hq1l97enHqPesWvVhlu1c5+22WaJA7rfT3hcAiXiG8LWEALYSTjMq9DbCaUtYEzJXSmx5NdRNUddS0zWh4Sx9sSkaQJ6RY713Xh8MfFqDws22qbo19HFsCOhuThmz7DUM3dr4T6wX+6NxMM79dI7ZjEpPpa05IioTarJWiNG4vMpAdGs1PkdTBJELhX7OLXsRrO2HsPY5hEQ+/dEE4bLxhDXuHVdcg14zc8jP9nxKD6HkuSGI1MfRUN/k4OSMZd73w91HCUKgbHcle3qhIkttl9C6J1SRubVOg6V3PTTtaNUV98qAOaZ15aPWWUZKEe12LBmEhE6drFzVrtiCsXaHJ

X-Received: by 2002:a05:6214:3a05:b0:6a0:de8b:4bfb with SMTP id

6a1803df08f44-6a1683769a3mr44190936d6.45.1715406796836; Fri, 10 May 2024

22:53:16 -0700 (PDT)

MIME-Version: 1.0

From: =?UTF-8?Q?Boursiquot_Ana=C3=ABlle?=

Date: Sat, 11 May 2024 11:53:03 +0600

Message-ID:

Subject: =?UTF-8?B?8J+ShPCfkosgV2UgbmVlZCByZWFsIG1hbGUhISDwn42T8J+NjA==?=

To: dece15-912016742@googlegroups.com, dece15-912016917@googlegroups.com,

dece15-912017260@googlegroups.com, dece15-912020230@googlegroups.com,

dece15-912020772@googlegroups.com, dece15-912025199@googlegroups.com,

dece15-912025586@googlegroups.com, dece15-912027395@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com

Content-Type: multipart/alternative; boundary="000000000000c55b1a0618274471"

X-Original-Sender: anaelleboursiquot633@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=Unh386St; spf=pass

(google.com: domain of anaelleboursiquot633@gmail.com designates

2607:f8b0:4864:20::732 as permitted sender) smtp.mailfrom=anaelleboursiquot633@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: We are looking for good f*cker. Who can satisfy our female

clients. $100-$500 for f*cking our female clients. More info - https://sites.google.com/view/cafw35

Thanks ! ////////////////////////////////



Content analysis details: (10.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.64 listed in dnsbl.ahbl.org]

[209.85.161.64 listed in dnsbl.ahbl.org]

[209.85.161.64 listed in dnsbl.ahbl.org]

[209.85.161.64 listed in dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:732 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:732 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:732 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:732 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.64 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.64 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.64 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.64 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.64 listed in will-spam-for-food.eu.org]

[209.85.161.64 listed in will-spam-for-food.eu.org]

[209.85.161.64 listed in will-spam-for-food.eu.org]

[209.85.161.64 listed in will-spam-for-food.eu.org]

[209.85.161.64 listed in will-spam-for-food.eu.org]

[209.85.161.64 listed in will-spam-for-food.eu.org]

[209.85.161.64 listed in will-spam-for-food.eu.org]

[209.85.161.64 listed in will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:732 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:732 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:732 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:732 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:732 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:732 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:732 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:732 listed in]

[will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.64 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.161.64 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[anaelleboursiquot633(at)gmail.com]

2.5 SORTED_RECIPS Recipient list is sorted by address

0.6 J_CHICKENPOX_15 BODY: 1alpha-pock-5alpha

0.6 J_CHICKENPOX_14 BODY: 1alpha-pock-4alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} =?UTF-8?B?8J+ShPCfkosgV2UgbmVlZCByZWFsIG1hbGUhISDwn42T8J+NjA==?=



--000000000000c55b1a0618274471

Content-Type: text/plain; charset="UTF-8"



We are looking for good f*cker.

Who can satisfy our female clients.

$100-$500 for f*cking our female clients.

More info -

https://sites.google.com/view/cafw35



Thanks !









































////////////////////////////////



--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CAG7gK-PsS7Z8k8iAu%2BbfXwxkgf_GeYf4SFrtohRtYgfnmxiTww%40mail.gmail.com.



--000000000000c55b1a0618274471

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



We are looking for good f*cker.
Who can satisfy our fem=

ale clients.
$100-$500 =C2=A0for f*cking our female clients.
More inf=

o -
https://sites.googl=

e.com/view/cafw35

Thanks !









r>










/////////////////////////////=

///








--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com.


To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CAG7gK-PsS7Z8k8iAu%2BbfXwxkgf_GeYf4SFrtohRtYgf=

nmxiTww%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://gr=

oups.google.com/d/msgid/dece15-912025586/CAG7gK-PsS7Z8k8iAu%2BbfXwxkgf_GeYf=

4SFrtohRtYgfnmxiTww%40mail.gmail.com.




--000000000000c55b1a0618274471--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a