Philantropic spam from sendgrid

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jul 2024 06:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sTL2o-00000000HyZ-21ud

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 06:43:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jul 2024 06:43:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhsb.outbound-mail.sendgrid.net ([159.183.224.107]:45368)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sTKIJ-00000000G4g-2jIq

for root@nk.ca;

Mon, 15 Jul 2024 05:55:08 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=drew-pearson.com;

h=content-type:mime-version:content-transfer-encoding:

content-description:subject:from:reply-to:to:cc:content-type:from:subject:to;

s=s1; bh=LdHLPM2sroAIbTJ3tG1WsDDGHnIQjD7A6zu0qm1QJAw=;

b=8puWDNGTTM1hywTipvuIZDoUpV9ys0zzFZiidrA+dMfR0JjS9sIrFwVA/FjrZ4ws70fE

DIUldsqVlNeIq5ljU63oMxO9o/BrBbdZZbIzGkbGIQ/BdEhwApmP9D2PZS+IJKr5eubWoG

NabIg+Z7Avk9eJF98RUnBdBVa1s6RmIkDGwn+EZVjyQyy9z2CAA+T/CRX41tF5Wxld8QiZ

0AcvMlSt2GSWWthCaR10NYPs15/UIrQldguZgN71Ozv+IFzihPKXJWJWwGJdd01aJuXjp5

teHwMGlDNy7QvHvIHHxiDHQBQ2ZPWEzBHtfPmf0N3EgE34ICPiKEhu6idLfrw0xQ==

Received: by recvd-f549d465d-wplm9 with SMTP id recvd-f549d465d-wplm9-1-66950D9B-2B

2024-07-15 11:52:59.536286291 +0000 UTC m=+1536102.593572587

Received: from [10.102.37.150] (unknown)

by geopod-ismtpd-15 (SG) with ESMTP

id YcxxRNzDRESCr15YWL2a8A

Mon, 15 Jul 2024 11:52:59.409 +0000 (UTC)

Content-Type: text/plain; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: From a dreamer!!

From: Jeff Rothschild

Date: Mon, 15 Jul 2024 11:53:01 +0000 (UTC)

Message-ID:

Reply-To: orangebluemoon@naver.com

X-SG-EID:

=?us-ascii?Q?u001=2E6XgS+aMGExnB1bqZZrdrz9csChZfh9avhNnUZtsaNyvJNh7IiPg0spDJI?=

=?us-ascii?Q?o7l0sTko1RUJBNy1Dm8ZJ4WfREjBB1e6MrvKmgQ?=

=?us-ascii?Q?Ues6vLs4elVGim1wHqW=2F72Bfaa2m5CifNEHRaAF?=

=?us-ascii?Q?YJSwOFw=2F6PJXYgCHEiJmAbWEG=2Fl+Vwc5kSAnnDN?=

=?us-ascii?Q?0Q6uJlQPWnZ3MDPJ7o4dbmIjJY2P6yxkmH8Wp+h?=

=?us-ascii?Q?g2hP7p4JR7VEdY1dQK3ikaFrNHESS4SxsCDL+=2FX?= =?us-ascii?Q?AXQz?=

To: YOU

X-Entity-ID: u001.oPe5PDTkHFo7FEUB1JI2PQ==

X-Spam_score: 29.7

X-Spam_score_int: 297

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I hope this letter finds you well, surrounded

by the warmth of loved ones and the promise of a new day. My name is Jeff

Rothschild, and I am writing to you today with a heart full of excitement

and a [...]



Content analysis details: (29.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.107 listed in dnsbl.ahbl.org]

[159.183.224.107 listed in dnsbl.ahbl.org]

[159.183.224.107 listed in dnsbl.ahbl.org]

[159.183.224.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.107 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.107 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[159.183.224.107 listed in psbl.surriel.com]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[159.183.224.107 listed in ix.dnsbl.manitu.net]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[159.183.224.107 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} From a dreamer!!



Dear Friend,



I hope this letter finds you well, surrounded by the warmth of loved ones a=

nd the promise of a new day. My name is Jeff Rothschild, and I am writing t=

o you today with a heart full of excitement and a vision for a different ki=

nd of philanthropy.



Below is a profile of me:

www.forbes.com/profile/jeff-rothschild/?sh=3D457d14d2c87a



For many years, I have dedicated myself to supporting various charities and=

causes that are dear to my heart. While I am proud of the impact we have m=

ade together, I have come to realize that there is more to giving than simp=

ly writing a check.



Recently, I had a dream=E2=80=94a vivid, inspiring dream that left me with =

a sense of clarity and purpose. In that dream, I saw the faces of ordinary =

people like you and me, each with their own hopes, dreams, and struggles. A=

nd in that moment, I knew that I needed to be more personal with my giving,=

to touch lives in a way that has never been done before.



That is why I am reaching out to you today, not as a distant benefactor, bu=

t as a fellow traveler on this journey we call life. I want to invite you t=

o be a part of something truly special, something that goes beyond traditio=

nal philanthropy and connects us on a deeper, more personal level.



Consider this letter your golden ticket to a brighter future. You've been s=

elected as the recipient of a generous donation from me., This is my apprec=

iation for your presence in this world. But this gift is more than just a m=

aterial offering; it is an invitation to join me in a shared mission of com=

passion, empathy, and human connection.



Together, we can make a difference in the lives of ordinary people in ways =

that are both meaningful and profound. Whether it's lending a listening ear=

to a friend in need, offering a helping hand to a neighbor facing adversit=

y, or simply sharing a smile with a stranger, every act of kindness has the=

power to create ripple effects of love and positivity.



So please, accept this gift with an open heart and know that it comes with =

no expectations or obligations. Consider it a gesture of friendship, a symb=

ol of our shared humanity, and a catalyst for the extraordinary things we c=

an achieve when we come together with purpose and passion.



Kindly provide your full name and address, and I will guide you on how to r=

eceive this donation..



Thank you for being a part of this journey with me. May our shared vision o=

f a kinder, more compassionate world inspire us to take bold action and spr=

ead love wherever we go.



With warmest regards,



Jeff Rothschild

Philantropic spam from sendgrid

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jul 2024 06:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sTL2g-00000000HxT-1uv2

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 06:42:58 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jul 2024 06:42:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhss.outbound-mail.sendgrid.net ([159.183.224.102]:32890)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sTKIB-00000000G3u-08Wc

for root@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 05:54:59 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=drew-pearson.com;

h=content-type:mime-version:content-transfer-encoding:

content-description:subject:from:reply-to:to:cc:content-type:from:subject:to;

s=s1; bh=LdHLPM2sroAIbTJ3tG1WsDDGHnIQjD7A6zu0qm1QJAw=;

b=8puWDNGTTM1hywTipvuIZDoUpV9ys0zzFZiidrA+dMfR0JjS9sIrFwVA/FjrZ4ws70fE

DIUldsqVlNeIq5ljU63oMxO9o/BrBbdZZbIzGkbGIQ/BdEhwApmP9D2PZS+IJKr5eubWoG

NabIg+Z7Avk9eJF98RUnBdBVa1s6RmIkDGwn+EZVjyQyy9z2CAA+T/CRX41tF5Wxld8QiZ

0AcvMlSt2GSWWthCaR10NYPs15/UIrQldguZgN71Ozv+IFzihPKXJWJWwGJdd01aJuXjp5

teHwMGlDNy7QvHvIHHxiDHQBQ2ZPWEzBHtfPmf0N3EgE34ICPiKEhu6idLfrw0xQ==

Received: by recvd-85955b6b-wcrzz with SMTP id recvd-85955b6b-wcrzz-1-66950D94-30

2024-07-15 11:52:52.580497653 +0000 UTC m=+1536314.648192969

Received: from [10.102.37.150] (unknown)

by geopod-ismtpd-15 (SG) with ESMTP

id YxTqQBR8S9yQ9Me5hrEM7g

Mon, 15 Jul 2024 11:52:52.472 +0000 (UTC)

Content-Type: text/plain; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: From a dreamer!!

From: Jeff Rothschild

Date: Mon, 15 Jul 2024 11:52:53 +0000 (UTC)

Message-ID:

Reply-To: orangebluemoon@naver.com

X-SG-EID:

=?us-ascii?Q?u001=2E6XgS+aMGExnB1bqZZrdrz9csChZfh9avhNnUZtsaNyvJNh7IiPg0spDJI?=

=?us-ascii?Q?o7l0sTko1RUJBNy1Dm8ZJ4WfREjBB1e6MrvKmgQ?=

=?us-ascii?Q?Ues6vLs4elX0UQbLLHrrOMY9IQm84UFlX1P26Hz?=

=?us-ascii?Q?nU5klwj8ncOarthBg4FGruf7WxD4KuCSABP2T5R?=

=?us-ascii?Q?8Og3XPoNkJ4xW9z3rDV8S62c=2F6WhuZCay=2Fng9wl?=

=?us-ascii?Q?KHauXXVKZkmeekycm5xAi3Kc+fxQMI=2FQX4je1tB?=

=?us-ascii?Q?cT6tCZNy=2Fvp2WExl=2Fz7=2FF1G55g=3D=3D?=

To: YOU

X-Entity-ID: u001.oPe5PDTkHFo7FEUB1JI2PQ==

X-Spam_score: 26.8

X-Spam_score_int: 268

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I hope this letter finds you well, surrounded

by the warmth of loved ones and the promise of a new day. My name is Jeff

Rothschild, and I am writing to you today with a heart full of excitement

and a [...]



Content analysis details: (26.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

[159.183.224.102 listed in dnsbl.ahbl.org]

[159.183.224.102 listed in dnsbl.ahbl.org]

[159.183.224.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[159.183.224.102 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[159.183.224.102 listed in ix.dnsbl.manitu.net]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} From a dreamer!!



Dear Friend,



I hope this letter finds you well, surrounded by the warmth of loved ones a=

nd the promise of a new day. My name is Jeff Rothschild, and I am writing t=

o you today with a heart full of excitement and a vision for a different ki=

nd of philanthropy.



Below is a profile of me:

www.forbes.com/profile/jeff-rothschild/?sh=3D457d14d2c87a



For many years, I have dedicated myself to supporting various charities and=

causes that are dear to my heart. While I am proud of the impact we have m=

ade together, I have come to realize that there is more to giving than simp=

ly writing a check.



Recently, I had a dream=E2=80=94a vivid, inspiring dream that left me with =

a sense of clarity and purpose. In that dream, I saw the faces of ordinary =

people like you and me, each with their own hopes, dreams, and struggles. A=

nd in that moment, I knew that I needed to be more personal with my giving,=

to touch lives in a way that has never been done before.



That is why I am reaching out to you today, not as a distant benefactor, bu=

t as a fellow traveler on this journey we call life. I want to invite you t=

o be a part of something truly special, something that goes beyond traditio=

nal philanthropy and connects us on a deeper, more personal level.



Consider this letter your golden ticket to a brighter future. You've been s=

elected as the recipient of a generous donation from me., This is my apprec=

iation for your presence in this world. But this gift is more than just a m=

aterial offering; it is an invitation to join me in a shared mission of com=

passion, empathy, and human connection.



Together, we can make a difference in the lives of ordinary people in ways =

that are both meaningful and profound. Whether it's lending a listening ear=

to a friend in need, offering a helping hand to a neighbor facing adversit=

y, or simply sharing a smile with a stranger, every act of kindness has the=

power to create ripple effects of love and positivity.



So please, accept this gift with an open heart and know that it comes with =

no expectations or obligations. Consider it a gesture of friendship, a symb=

ol of our shared humanity, and a catalyst for the extraordinary things we c=

an achieve when we come together with purpose and passion.



Kindly provide your full name and address, and I will guide you on how to r=

eceive this donation..



Thank you for being a part of this journey with me. May our shared vision o=

f a kinder, more compassionate world inspire us to take bold action and spr=

ead love wherever we go.



With warmest regards,



Jeff Rothschild

UPS Phish from sendgrid

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 12:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSKc7-00000000Jz9-19kE

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 12:03:23 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jul 2024 12:03:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhss.outbound-mail.sendgrid.net ([159.183.224.102]:27902)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSJGf-000000008Lc-2C5e

for root@nl2k.ab.ca;

Fri, 12 Jul 2024 10:37:14 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alaiko.com;

h=from:subject:mime-version:to:content-type:content-transfer-encoding:

cc:content-type:from:subject:to;

s=s1; bh=QqUlVcmrAxFNDL2xU92jZvr//mQtVEyLJHIKzc6WoWU=;

b=USB+Nuffau+aORXLvwaXdA98Z4aTx3Ibvmn7Jejo+FuS1PWL2Db5BZ1Fh7csBgJm3Dho

+gwXOoKuu8RVHomg/Tvizk+hkigJ5Uc9nX3wgm/ycJZx7WYoYylx+hi+plLyfoXaJBbdIJ

aecmcELuqYkFNh2qoUiMp0McJ79PsDF+NKfb0RoHEDJC1TxhdG7WcAJEy9F0g9fa4NOAOl

PMfHp0yRm8BIBI9H5Nbai9OB8OoKwHRkD6VCkMvJFsqS84IQrhb4Ch263vsnXIFDAQVUjy

/d4eFkW7TtNxvVwCrRRrFr5IUXc+IjU+YCUvDPDYtxONrcwP2Ked6I+lW9sIleSw==

Received: by recvd-6db8b86b6c-fkz5t with SMTP id recvd-6db8b86b6c-fkz5t-1-66915B3B-8F

2024-07-12 16:35:07.753680465 +0000 UTC m=+1293582.122527308

Received: from [127.0.0.1] (unknown)

by geopod-ismtpd-10 (SG) with ESMTP

id QZGv5clTSwWvJRwO1ak6CA

for ;

Fri, 12 Jul 2024 16:35:07.696 +0000 (UTC)

From: UPS

Subject: Deine Bestellung wird verschickt

Message-ID: <201d71fbc740b078ff565fc3b3eeb958@alaiko.com>

MIME-Version: 1.0

Date: Fri, 12 Jul 2024 16:35:07 +0000 (UTC)

X-SG-EID:

=?us-ascii?Q?u001=2EGdr5us7BlGEJ8PGTF6wYXjwdNl5thnWRxqZdU9k+za1lIp1qXfuFLgtYP?=

=?us-ascii?Q?fdvzU9vRmoBF=2FNF33N4VmWQFWAHYgGwHCZErufw?=

=?us-ascii?Q?WuqD4cCiUk40uU4S5JHNzlw0m3GfYKsE8nn+TwZ?=

=?us-ascii?Q?UizRtOXr9Enl=2FZDzTF3iEuVuCLRzvqSz+9IhVvq?=

=?us-ascii?Q?wDixf2GDlgu+UUxdUtnozm0HSPDhd2XPbLAPcI6?=

=?us-ascii?Q?kvIelxssp1AUa+svyRgG+A=3D?=

To: root@nl2k.ab.ca

X-Entity-ID: u001.XGAkTjREh7iNWAYmSHQEKA==

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 20.8

X-Spam_score_int: 208

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear customer, We regret to inform you that due to an incorrect

shipping address,



Content analysis details: (20.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

[159.183.224.102 listed in dnsbl.ahbl.org]

[159.183.224.102 listed in dnsbl.ahbl.org]

[159.183.224.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[159.183.224.102 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} Deine Bestellung wird verschickt
















-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">3D""
.net/up/22/37/z5sc.png" style=3D"width: 200px; height: 113px;" />





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">
if;">Dear customer,





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">

We regret to inform you that =

due to an incorrect shipping address,





Your package number #
yle=3D"font-family:arial,helvetica,sans-serif;">3543540

=3D"font-family:arial,helvetica,sans-serif;">
is waiting to be proce=

ssed at our facility.





To ensure on-time delivery, w=

e ask that you update your shipping address as soon as possible using the s=

ecure link below:






VJOq6p2d6-2FJyioXBntlkkprxOetBDy-2Fqyyk4vUAwY8-2Bq0bT-2BLbCmbElSEiCB4kV3EUO=

5U3jmmEVXC8xZIjmAd1pCIsfTL9ia7kcW5bbebHGdv4G-2FWFQ9MhG_YmNPztx4miJCrnDYqcF7=

jRhOx4gA-2BABsH4qaymACKSmTrUfqkp8sHUoy6KCct0-2BNRSwJCqlPp8FcQOyVGl6ay8ErN5-=

2FeUC3uhqTbSe-2FFnC62ZbmzdX2ULd9glCI8t4ylrw9pI2Sz88GKXVEPiPnAqC-2BfEek8w8ky=

-2BBAR-2FTy4rbYroJsdRBjV3PMtqb5ZkLJ5DJAX0epvApZYczK-2F1sErTQ-3D-3D">
tyle=3D"font-family:georgia,serif;">update my address





 






;">Once your shipping address is updated, we will process your package and =

provide you with all associated tracking information.






;">If you have any questions or problems with your package, please don'=

t hesitate to contact us.






;">Thank you for choosing our service.






;">yours sincerely,








=

©2024 U=

PS. The content of this message is protected by copyright and trademark law=

s under United States and international laws.






h8zbjtok-2FCtl-2F2wNQnu2TxchPxjN3dfIpFh-2FgKbqGCp4-2BHwRQx-2BNnLRrZeuid1LGz=

DF3zWAwr88BE14-2FiGv8Kt6Y3foELovrWyQKfb2W1dh-2BDkLzLToyeEv6bOzz8askqTFemHpq=

uWqCOK33lcC6g1bimry5fXWr5XN2mNmCbX3rGtJrILBcGf0k7QO1JOHXTkdg-3D-3D" alt=3D"=

" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;widt=

h:1px !important;border-width:0 !important;margin-top:0 !important;margin-b=

ottom:0 !important;margin-right:0 !important;margin-left:0 !important;paddi=

ng-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;=

padding-left:0 !important;"/>

UPS Phish from sendgrid

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 12:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSKcB-00000000Jzt-1FUe

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 12:03:27 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jul 2024 12:03:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.xtrwkqxb.outbound-mail.sendgrid.net ([167.89.20.171]:51496)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSJGh-000000008Lr-0zY1

for root@nl2k.ab.ca;

Fri, 12 Jul 2024 10:37:15 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alaiko.com;

h=from:subject:mime-version:to:content-type:content-transfer-encoding:

cc:content-type:from:subject:to;

s=s1; bh=YVp7t719ZGfW6UlAnIXS9PG74guIE4F4ffakxMFuMSU=;

b=FQC6akBbKevppv9iZso/lTsF1Lwp80iCaYsmH0ZrFn7hSSgn10a5Z+j1O2dGdMqpetyB

a7JB3/+vK81jl2s93xUhT/GNmj93bVjbEkB54jnsrUU5Cf4UrlYLwaQNxSSD1bPSBcxIFq

rgc4tuAe+x5l8h8/w/tJQD6T24ZBKpWdujld+dGl65w8ZCBaViSyX/PRsySuuo6GcmYpFW

rCE27nacZnh1dTwwvubVwnvvW/iJ2rsys43mV7aaEIjd7WdYU7cJ+HtkQ9/2/s3Aaoav18

i1Q2umx/C/f754KSJNbqOXnQrymsvWIWPpZFUwBJsi1/nBPZn2JaHVyzKvvR6kqQ==

Received: by recvd-f549d465d-wplm9 with SMTP id recvd-f549d465d-wplm9-1-66915B3E-6C

2024-07-12 16:35:10.711532244 +0000 UTC m=+1293833.768818510

Received: from [127.0.0.1] (unknown)

by geopod-ismtpd-10 (SG) with ESMTP

id SqrTv4N0TSa_5mV1Ztspig

for ;

Fri, 12 Jul 2024 16:35:10.593 +0000 (UTC)

From: UPS

Subject: Your order gets shipped

Message-ID:

MIME-Version: 1.0

Date: Fri, 12 Jul 2024 16:35:10 +0000 (UTC)

X-SG-EID:

=?us-ascii?Q?u001=2EGdr5us7BlGEJ8PGTF6wYXjwdNl5thnWRxqZdU9k+za1lIp1qXfuFLgtYP?=

=?us-ascii?Q?fdvzU9vwDbWbVIBy7Gb+Wl2mGag27t+fx20txux?=

=?us-ascii?Q?9AuiDPJcP1sdN+NT2RyqwZvXAwb12NVth5=2FXpfz?=

=?us-ascii?Q?ljsL5oH+Rk6UinNY1GFhIEdi9ClKgp4zs2IMoSp?=

=?us-ascii?Q?XrcgcanZeIIagfvpT3F0hCj3xNxZOewbIcWvHKD?=

=?us-ascii?Q?yR+j4Tf7mxUcKGtsV4elTY=3D?=

To: root@nl2k.ab.ca

X-Entity-ID: u001.XGAkTjREh7iNWAYmSHQEKA==

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 20.8

X-Spam_score_int: 208

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear customer, We regret to inform you that due to an incorrect

shipping address,



Content analysis details: (20.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[167.89.20.171 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} Your order gets shipped
















-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">3D""
.net/up/22/37/z5sc.png" style=3D"width: 200px; height: 113px;" />





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">
if;">Dear customer,





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">

We regret to inform you that =

due to an incorrect shipping address,





Your package number #
yle=3D"font-family:arial,helvetica,sans-serif;">3543540

=3D"font-family:arial,helvetica,sans-serif;">
is waiting to be proce=

ssed at our facility.





To ensure on-time delivery, w=

e ask that you update your shipping address as soon as possible using the s=

ecure link below:






VJOq6p2d6-2FJyioXBntlkkprxOetBDy-2Fqyyk4vUAwY8-2Bq0bT-2BLbCmbElSEiCB4kV3EUO=

5U3jmmEVXC8xZIjmAd1pCIsfTL9ia7kcW5bbebHGdv4G-2FWFQTR8e_YmNPztx4miJCrnDYqcF7=

jRhOx4gA-2BABsH4qaymACKSlhIu8BUfvLwx4yRxy1dlV-2BMKi9Jj-2F68dO3auirz2oDGOUtn=

sqOF4b-2Bm0CsjNBChtS23dkRt5OwFAhRB-2FpO7-2F5DgzJEKQPC-2FTAfJGXTIDVPRzbyzZbu=

9zGtUMb5y2KcTUlLR-2FFjdgwA6LqCkya-2FVnWs8x4IvZL-2FX9flYzpsfDBtrg-3D-3D">
an style=3D"font-family:georgia,serif;">update my address





 






;">Once your shipping address is updated, we will process your package and =

provide you with all associated tracking information.






;">If you have any questions or problems with your package, please don'=

t hesitate to contact us.






;">Thank you for choosing our service.






;">yours sincerely,








=

©2024 U=

PS. The content of this message is protected by copyright and trademark law=

s under United States and international laws.






h8zbjtok-2FCtl-2F2wNQnu2TxchP9kmHDKKsAGl3mVki1oyB1v95ksyjP02anf5a-2B8vDqpnd=

KYSAtkZEK4ZMYbRE29-2B4tg-2BuJvUbCVNkhF2XomJRVYUhG-2FdvVO8r0-2BAhEE-2BWXCUQ9=

-2B8h5KiHF0vUa5h6w05-2BC2G4pYFNuetwRgbItLT8hTAX0NxD3f8rPt5k3H0Pvmw-3D-3D" a=

lt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !importan=

t;width:1px !important;border-width:0 !important;margin-top:0 !important;ma=

rgin-bottom:0 !important;margin-right:0 !important;margin-left:0 !important=

;padding-top:0 !important;padding-bottom:0 !important;padding-right:0 !impo=

rtant;padding-left:0 !important;"/>

UPS Phish from sendgirid

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 12:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSKcI-00000000K1N-3i8S

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 12:03:34 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jul 2024 12:03:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.xtrwkqxb.outbound-mail.sendgrid.net ([167.89.20.171]:44176)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSJYJ-00000000AjV-2Skd

for root@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 10:55:28 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alaiko.com;

h=from:subject:mime-version:to:content-type:content-transfer-encoding:

cc:content-type:from:subject:to;

s=s1; bh=k1NU5cJ6G8TjpZwdV0phokSmL5dVtq3AsGr7/o54aKY=;

b=b8lOeJaLvM49U7hpKh1upyRbIuPeTV9E54kOioyiJ1TYTsLfuO224RJ3rjiz94AEUmCU

FL1NYlyOs6bVCJaA9NZT/WVfxKVgKULLfI/uCBKGw5GxUxhBjNqIj5SrXOixLmoLKfRP0z

TU3YUNwhVdvsZu7hI55oPuFTY4n4dBljlo8SiW8TozO/BBP66+KJwWFhfFzmsWintR6Juz

XCAM5AV+pLFuy6XUv/gzBDHUJy8ist9jqeGa1iIQwCpkgheT3gbmhSisA0KXfOv6MxzbCy

nsYymB0zBJs5kPfAvHrlQcgDExUqmUCOwyyzjlJuFERfkHm4q/fkSJajyHXzCGaA==

Received: by recvd-75d57cd4b8-rw8gr with SMTP id recvd-75d57cd4b8-rw8gr-1-66915F83-47

2024-07-12 16:53:23.758951789 +0000 UTC m=+1295099.443951438

Received: from [127.0.0.1] (unknown)

by geopod-ismtpd-10 (SG) with ESMTP

id 4D2JnuF-S9KvUNvUvXCEbg

for ;

Fri, 12 Jul 2024 16:53:23.661 +0000 (UTC)

From: UPS

Subject: Your order gets shipped

Message-ID: <0cc78240e2ee14df230cc9c59cb5bfa9@alaiko.com>

MIME-Version: 1.0

Date: Fri, 12 Jul 2024 16:53:23 +0000 (UTC)

X-SG-EID:

=?us-ascii?Q?u001=2EGdr5us7BlGEJ8PGTF6wYXjwdNl5thnWRxqZdU9k+za1lIp1qXfuFLgtYP?=

=?us-ascii?Q?fdvzU9v7=2FfwuuH8cCwGC0wm7h5NKyjCI2xrDwvS?=

=?us-ascii?Q?tZIwR5Qc=2FgzwZbu2fGZhFAnWZQoQNvKCRsxma1u?=

=?us-ascii?Q?IgiZIUu3mIpws9m4plppl7ngShNDkXU9nw8TCgJ?=

=?us-ascii?Q?0+piGwwpPYqrGedUOqEJx=2FfqxPNmywfUwn6Kdkt?=

=?us-ascii?Q?73UBfOkX7jScoFBVunwhnI=3D?=

To: root@doctor.nl2k.ab.ca

X-Entity-ID: u001.XGAkTjREh7iNWAYmSHQEKA==

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 20.8

X-Spam_score_int: 208

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear customer, We regret to inform you that due to an incorrect

shipping address,



Content analysis details: (20.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[167.89.20.171 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} Your order gets shipped
















-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">3D""
.net/up/22/37/z5sc.png" style=3D"width: 200px; height: 113px;" />





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">
if;">Dear customer,





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">

We regret to inform you that =

due to an incorrect shipping address,





Your package number #
yle=3D"font-family:arial,helvetica,sans-serif;">3543540

=3D"font-family:arial,helvetica,sans-serif;">
is waiting to be proce=

ssed at our facility.





To ensure on-time delivery, w=

e ask that you update your shipping address as soon as possible using the s=

ecure link below:






VJOq6p2d6-2FJyioXBntlkkprxOetBDy-2Fqyyk4vUAwY8-2Bq0bT-2BLbCmbElSEiCB4kV3EUO=

5U3jmmEVXC8xZIjmAd1pCIsfTL9ia7kcW5bbebHGdv4G-2FWFQassp_DSy21Lsls7pYbx4vputm=

gQCW99fw6OQgAkUuuBmL-2FlMR4U5m-2BfDBj2FYCZTFgPbNDjbdvv0k5IXnNYsvJlp04G8YztK=

KiiH9iRpIxvvMGN-2BBfdO1G-2F2WFZmVfyWyWQBcpf29uRXDkxcFF8c0JaHMO0Md3351SeNWf-=

2FTYgnoJea82-2BIibXhWPa6GDYNmJGs45XCKzF5MpSZpggnzq8LOuAg-3D-3D">
=3D"font-family:georgia,serif;">update my address





 






;">Once your shipping address is updated, we will process your package and =

provide you with all associated tracking information.






;">If you have any questions or problems with your package, please don'=

t hesitate to contact us.






;">Thank you for choosing our service.






;">yours sincerely,








=

©2024 U=

PS. The content of this message is protected by copyright and trademark law=

s under United States and international laws.






uVVbhb04EJe-2FJwi1P6AwsUbQsx-2FD-2BnXMYmNaxfFhVTrMkLyXl1Ghc5Lu-2B4VyesEePHg=

l-2BFWztUa5X2iQqVMNELiLYiyuEbindd1bwwXm20GtiCOOBK3jmGnPR-2Fa-2B-2Bba5dROsxR=

70-2B3IZDfCeCmtQC-2B-2Bs7HJ6DmQBPsT1j4IcYkUdU7jQo5EbbDA7ieFRbKnN55Yzk2hGPLX=

Gb-2BYlspCf3XvZ-2BRM-3D" alt=3D"" width=3D"1" height=3D"1" border=3D"0" sty=

le=3D"height:1px !important;width:1px !important;border-width:0 !important;=

margin-top:0 !important;margin-bottom:0 !important;margin-right:0 !importan=

t;margin-left:0 !important;padding-top:0 !important;padding-bottom:0 !impor=

tant;padding-right:0 !important;padding-left:0 !important;"/>

UPS Phish from sendgirid

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 12:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSKcM-00000000K27-1Hnp

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 12:03:38 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jul 2024 12:03:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.xtrwkqxb.outbound-mail.sendgrid.net ([167.89.20.171]:46256)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSJYJ-00000000Ajh-2SKK

for root@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 10:55:28 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alaiko.com;

h=from:subject:mime-version:to:content-type:content-transfer-encoding:

cc:content-type:from:subject:to;

s=s1; bh=IohHthZW/V7t9BE7s9uVCbLancy60mgqSh7/rwmEdmU=;

b=fm6tTRlZMIeaS0YlglErCSxD/qKKDpeMdHxmZC004Qvf11rBatKupGGQKVW1BAxdN6To

rZLarRneP4raeJDPYbEXGAkSWLAaVXm54sXyO/1R/dqFyj9e/Vw87vvI/bBG5Dbp2Gd0zA

nzKeBKD8RADNSlkWetRoQ2lb3b05CvEqJPOcajHDPuI5OufeuF4+jtmAtdAhvm6MBLZLwb

vA4sgzrHS+2Bw2G+Djt0YzB5FqC+FGrEpP9NmzrXh0Wgsn4lOW1WG3WDpVMBaJiwws8K4O

YlbM/qJHcoZpm61CcogT2KBXnyWEvFnhXPAnaFT9j5JNs6MYkhmIXBqfDA5wAUIw==

Received: by recvd-957c9746c-497fb with SMTP id recvd-957c9746c-497fb-1-66915F87-62

2024-07-12 16:53:27.721254766 +0000 UTC m=+1295698.830390748

Received: from [127.0.0.1] (unknown)

by geopod-ismtpd-1 (SG) with ESMTP

id I5CfLyq-RU6GaAGOmPv04A

for ;

Fri, 12 Jul 2024 16:53:27.633 +0000 (UTC)

From: UPS

Subject: Deine Bestellung wird verschickt

Message-ID: <4eff83c43ec9100bc44b89eac120134d@alaiko.com>

MIME-Version: 1.0

Date: Fri, 12 Jul 2024 16:53:27 +0000 (UTC)

X-SG-EID:

=?us-ascii?Q?u001=2EGdr5us7BlGEJ8PGTF6wYXjwdNl5thnWRxqZdU9k+za1lIp1qXfuFLgtYP?=

=?us-ascii?Q?fdvzU9vKpwUPm1oTMN8XrnGjIPwnDZJFrm4zjb0?=

=?us-ascii?Q?cxcq8D5f2RXhILJKae6L2GqwRAcERdUoCtKnWXV?=

=?us-ascii?Q?uXb+8EzklJShYshX9twidQwlSx5jdwtTJlCR4il?=

=?us-ascii?Q?mmEYkrCXvAfkr7lKanJ4H5Sph7o5AzyiscVlqpl?=

=?us-ascii?Q?b26Ex5W7Srs7MMdfQSsidk=3D?=

To: root@doctor.nl2k.ab.ca

X-Entity-ID: u001.XGAkTjREh7iNWAYmSHQEKA==

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 20.8

X-Spam_score_int: 208

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear customer, We regret to inform you that due to an incorrect

shipping address,



Content analysis details: (20.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[167.89.20.171 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} Deine Bestellung wird verschickt
















-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">3D""
.net/up/22/37/z5sc.png" style=3D"width: 200px; height: 113px;" />





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">
if;">Dear customer,





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">

We regret to inform you that =

due to an incorrect shipping address,





Your package number #
yle=3D"font-family:arial,helvetica,sans-serif;">3543540

=3D"font-family:arial,helvetica,sans-serif;">
is waiting to be proce=

ssed at our facility.





To ensure on-time delivery, w=

e ask that you update your shipping address as soon as possible using the s=

ecure link below:






VJOq6p2d6-2FJyioXBntlkkprxOetBDy-2Fqyyk4vUAwY8-2Bq0bT-2BLbCmbElSEiCB4kV3EUO=

5U3jmmEVXC8xZIjmAd1pCIsfTL9ia7kcW5bbebHGdv4G-2FWFQlTPn_DSy21Lsls7pYbx4vputm=

gQCW99fw6OQgAkUuuBmL-2FlOMWwOFSt1qhIkKBho7Jhr4pS01lj3nEB0B9LLcVE-2FQyNjJA4W=

ApowSuqL-2BNFb6Mfth51bVYJxMDQZDJzmQYczUh90HX1bMkDgilri-2FLGNswCoChy7b4LuftL=

kTVyiT8B9X1tV-2Fls7r9rI7FWJ5mcCR3rZJLBNrsGnwuCyfXuALAw-3D-3D">
=3D"font-family:georgia,serif;">update my address





 






;">Once your shipping address is updated, we will process your package and =

provide you with all associated tracking information.






;">If you have any questions or problems with your package, please don'=

t hesitate to contact us.






;">Thank you for choosing our service.






;">yours sincerely,








=

©2024 U=

PS. The content of this message is protected by copyright and trademark law=

s under United States and international laws.






uVVbhb04EJe-2FJwi1P6AwsUbQsx-2FUNl9i3z0nTJvFWJG1LA0rmhxO3NZmEEZBf-2B6dk-2BT=

xYuO8eIjeOrVgozyKjgmW6YJNZ4GCyrT-2FQPi4n0uYdgeeqyZtaM8ajWEgLCfO8EBKU1YpAfbv=

uTVBqlWfGZVD5kv-2B-2B5Db9V3Q1bMVdiihVzpjxScEP-2B5SW7QGCAU5laehNQ-3D-3D" alt=

=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;=

width:1px !important;border-width:0 !important;margin-top:0 !important;marg=

in-bottom:0 !important;margin-right:0 !important;margin-left:0 !important;p=

adding-top:0 !important;padding-bottom:0 !important;padding-right:0 !import=

ant;padding-left:0 !important;"/>