Opinion spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 10:07:05 -0600

Received: from mail-wr1-f42.google.com ([209.85.221.42]:55384)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1svfOY-000000002Bh-1QCT

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 10:06:50 -0600

Received: by mail-wr1-f42.google.com with SMTP id ffacd0b85a97d-37cca239886so3273976f8f.2

for ; Tue, 01 Oct 2024 09:04:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1727798676; x=1728403476; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=PMaOLwyxj3w3lHtR0f3TqH6Qo8d0YIpHFOdN63tE2Os=;

b=UtU7hxICSF04EWv7IiVrETNiqD4lRrjbBqo76ciJV7wJy8x4VkB6Gfrng4QYZpIcY6

Aodi41T4bcW9be1JeE1hnqKTkHogA1HBEQJwRMLHdjSTSGjruafai5UNAftPV3k9aIPz

Pw7ZbY2nDWvonKoZdBjR8y8ahNYhxW9YHXdzlkSdJ+byvBjOropFFGAvmKcI40RAY8d6

yrbGn1rx65uxmcEyXmNbOLkWXwmgVUTsYxuoF5DC5XR6iDKSPvUwJv1g3w90YhfCkXC8

C5j0yuQ0EY8d+orbJSU+MSviyEe0IFcQ5vRow7Wt9GQVEbFW++QDQh2a4OLvqJshyzRI

NbTA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1727798676; x=1728403476;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=PMaOLwyxj3w3lHtR0f3TqH6Qo8d0YIpHFOdN63tE2Os=;

b=lnWCi6jKT2ZMg7A2qzNK4/Tz1xgekL78t3VXmUXoB2dZRJKt4bRpv3dQh0qTYg1k2o

K2B3kW3eXYeiNXCey9uMv6AdwG1S5H7r7vekqZ8Bq5LIK8vD61uxaGK0gTyUkl2KPJQk

uSA95GY5PMjIsh7VzVRj+YGoRN8o51UaD0Wa/6TIppGL/9w+7Xnz5XBSTC5TCXKdKGUU

1M7RVeHQ7cvrpHWNicmEIR3f2QDqyl01JTHjxyhozS4AsSHuAWHeEwwyGeXIAeQbPzWi

nCHjGVo8ql9EFFNLjHq1l9xwcPJHXUIyhNigWHMnH4gEQwpoqRPAbCI+bobi8wwjdjrz

gxZg==

X-Forwarded-Encrypted: i=1; AJvYcCW36GUGzxzEWzn7TvedxKYWkT6W47JN/tWNdhhT4tjUiKiFaEmSbElOX/wjdMpT3CoY1nIR@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YzM+FB5oXVyZYq/jV2nEDNK1nI1nbi+XOqi6I3dh87HAD/b70v/

NS14Qa2AFrG9ZxXLSJxrFe+ZEjEupsdy57EFIRuJC2DCwSkLNh/PfskbIHMkvUFy8NVbE6RS6/N

u6mDJwIpd27Kgr1My6zuusOUn3Ug=

X-Google-Smtp-Source: AGHT+IHpgztcbDaYiULVDhHS2Tcnr7UUa1jp+KAMlIBle/TUTtHb9ITWO9JQQFgrugPgajfTjK+KV9oqdjcMocNX3uk=

X-Received: by 2002:adf:a1cc:0:b0:374:c95e:1636 with SMTP id

ffacd0b85a97d-37cfb8d0738mr58065f8f.21.1727798675701; Tue, 01 Oct 2024

09:04:35 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Sheila Katchur

Date: Tue, 1 Oct 2024 19:04:23 +0300

Message-ID:

Subject: what do you think

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000004f08da06236c7a9f"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 8.7

X-Spam_score_int: 87

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (8.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.42 listed in will-spam-for-food.eu.org]

[209.85.221.42 listed in will-spam-for-food.eu.org]

[209.85.221.42 listed in will-spam-for-food.eu.org]

[209.85.221.42 listed in will-spam-for-food.eu.org]

[209.85.221.42 listed in will-spam-for-food.eu.org]

[209.85.221.42 listed in will-spam-for-food.eu.org]

[209.85.221.42 listed in will-spam-for-food.eu.org]

[209.85.221.42 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.42 listed in dnsbl.ahbl.org]

[209.85.221.42 listed in dnsbl.ahbl.org]

[209.85.221.42 listed in dnsbl.ahbl.org]

[209.85.221.42 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.42 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.42 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.42 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.42 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.42 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.42 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[shik90635(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[shik90635(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} what do you think



--0000000000004f08da06236c7a9f

Content-Type: text/plain; charset="UTF-8"







--0000000000004f08da06236c7a9f

Content-Type: text/html; charset="UTF-8"












--0000000000004f08da06236c7a9f--

UPS Phish from Russia

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 09:32:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sveqy-000000000mS-0Qtg

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 09:31:56 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Oct 2024 09:31:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [95.213.192.96] (port=35543 helo=ewdraque.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1svedc-00000000PiO-3DJQ

for root@mail.nl2k.ab.ca;

Tue, 01 Oct 2024 09:18:20 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=mail.nl2k.ab.ca;

h=MIME-Version:To:From:Subject:Content-Type; i=root@mail.nl2k.ab.ca;

bh=Xe/HiTp+Xv4aAMpEN5B3eWkWzK0=;

b=o+FWzxDYbibwV5S+vhzVgXkYhkMzfxNjxtns1IM8B1V9Fk99eF1PDCVe3kLfAfoiOHcWUaG7hrOt

Amv5zzDiVxoAjEo+lFoDFjCpno2Kg2AhFCYIIDOHni/FVWXcA9dhxiYM2uuavr6va9ehnldAFuXL

Z1aRU5qa/osbWFlBteg=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=mail.nl2k.ab.ca;

b=HTCpZZH2B6JrRowQpRRNrGQVyTO+Uinwg/a5Jx6FTmUuGZJNWrgEnyI8nmJ9/qZdBVB+PGtiOvTa

rIUeyHpA9Gvms5sPvJp0uHpk7AlcVMD83+od2RJl2DvcqW3Gl2PLWqYG3oUIb1biI0Bn0jlmnl/R

o0DzdlfdhsKly/eqLjs=;

MIME-Version: 1.0

To: root@mail.nl2k.ab.ca

From: UPS Shipping

Subject: You've got 1 package pending for delivery root!

Content-Type: text/html

X-Spam_score: 19.3

X-Spam_score_int: 193

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Track & Trace Get Your Suspended Package



Content analysis details: (19.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.4 MISSING_DATE Missing Date: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[95.213.192.96 listed in will-spam-for-food.eu.org]

[95.213.192.96 listed in will-spam-for-food.eu.org]

[95.213.192.96 listed in will-spam-for-food.eu.org]

[95.213.192.96 listed in will-spam-for-food.eu.org]

[95.213.192.96 listed in will-spam-for-food.eu.org]

[95.213.192.96 listed in will-spam-for-food.eu.org]

[95.213.192.96 listed in will-spam-for-food.eu.org]

[95.213.192.96 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[95.213.192.96 listed in dnsbl.ahbl.org]

[95.213.192.96 listed in dnsbl.ahbl.org]

[95.213.192.96 listed in dnsbl.ahbl.org]

[95.213.192.96 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[95.213.192.96 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[95.213.192.96 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[95.213.192.96 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[95.213.192.96 listed in dnsbl.ahbl.org]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 SCC_CANSPAM_2 BODY: Interesting compliance language

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You've got 1 package pending for delivery root!













Track & Trace





















































Get Your Suspended Package



YOUR PACKAGE IS COMING



You have (1) package waiting for delivery. Use your code to track it and receive it. Schedule your delivery and subscribe to our push notifications to avoid this from happening again!



SCHEDULE YOUR DELIVERY



















Track all your shipments in one place. Keep us close at hand!



View the latest delivery statuses of all your shipments. See also detailed tracking history and expected delivery times for each shipment.



SCHEDULE YOUR DELIVERY





 




If you no longer wish to receive these emails, you may unsubscribe by clicking here or by writing to 1070 Montgomery Rd #2386 Altamonte Springs, FL 32714





 








UPS Phish from Russia

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 09:32:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sveqq-000000000mE-0bNI

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 09:31:48 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Oct 2024 09:31:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [95.213.192.109] (port=52863 helo=recursewor.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sveNS-00000000Oy6-1Ri3

for root@nk.ca;

Tue, 01 Oct 2024 09:01:41 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nk.ca;

h=MIME-Version:To:From:Subject:Content-Type; i=root@nk.ca;

bh=N8kzu1edyMUW4BpnCAPVY1lPJjk=;

b=FlI0ur6+s32d0Lc5cQ6utc9Gjdzfi5SMkYJ39GGsLe6ZbUKeysUu1z3sqfQq/7WrqJxugUd+jRnp

aTXn6kLcSf1K/kUr49Awvd752rm1tT/vPqHlNvoyoDnJ10v88pKD0pQ2AmwGcj1juIheJwl6nPAD

tzUWnQGPeEuppDpFJCI=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nk.ca;

b=sdMYfqdqJBupjmQJRgS0RHz4U2tPJasgJyECPwVSXs5Kb3kdbLylIaWboD/hGPdUHnBwcj4tSfcv

ziilDrB2vJ3e7iDS/Yjm0N+zAyeb0GZleXwI5NfFM7BfDbRzXgVfDVPiSDc0elxTlteIDbbj9eiS

5ZjSGJT384tvWOXmzPI=;

MIME-Version: 1.0

To: root@nk.ca

From: UPS Shipping

Subject: You've got 1 package pending for delivery root!

Content-Type: text/html

X-Spam_score: 19.3

X-Spam_score_int: 193

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Track & Trace Get Your Suspended Package



Content analysis details: (19.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.4 MISSING_DATE Missing Date: header

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[95.213.192.109 listed in will-spam-for-food.eu.org]

[95.213.192.109 listed in will-spam-for-food.eu.org]

[95.213.192.109 listed in will-spam-for-food.eu.org]

[95.213.192.109 listed in will-spam-for-food.eu.org]

[95.213.192.109 listed in will-spam-for-food.eu.org]

[95.213.192.109 listed in will-spam-for-food.eu.org]

[95.213.192.109 listed in will-spam-for-food.eu.org]

[95.213.192.109 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[95.213.192.109 listed in dnsbl.ahbl.org]

[95.213.192.109 listed in dnsbl.ahbl.org]

[95.213.192.109 listed in dnsbl.ahbl.org]

[95.213.192.109 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[95.213.192.109 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[95.213.192.109 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[95.213.192.109 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[95.213.192.109 listed in dnsbl.ahbl.org]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 SCC_CANSPAM_2 BODY: Interesting compliance language

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You've got 1 package pending for delivery root!













Track & Trace





















































Get Your Suspended Package



YOUR PACKAGE IS COMING



You have (1) package waiting for delivery. Use your code to track it and receive it. Schedule your delivery and subscribe to our push notifications to avoid this from happening again!



SCHEDULE YOUR DELIVERY



















Track all your shipments in one place. Keep us close at hand!



View the latest delivery statuses of all your shipments. See also detailed tracking history and expected delivery times for each shipment.



SCHEDULE YOUR DELIVERY





 




If you no longer wish to receive these emails, you may unsubscribe by clicking here or by writing to 1070 Montgomery Rd #2386 Altamonte Springs, FL 32714





 








UPS Phish from Russia

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path: <>

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 09:17:00 -0600

Received: from [87.251.83.57] (port=37549 helo=pinkiun.info)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1svecI-00000000Pdo-421O

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 09:16:58 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=doctor.nl2k.ab.ca;

h=MIME-Version:To:From:Subject:Content-Type; i=dave@doctor.nl2k.ab.ca;

bh=VVzYYpyaxmKC/o2XqUAsKQONYJI=;

b=U5jK5hIMKu2F66xr79LWYyohzw67yOW2N5v96UH6zuVhopWlQBnCqp0Zzi+Y2ppI5TNXpAzPXwJ8

FmhApNDfjjN3ydC+WyrlCE0jQWCAzOsBJ81Ng9Kew7cpmdFcefrjVwx6Pqf5HdP40wr9bcDBPmA+

phwCntfAmmCnwN0fj+s=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=doctor.nl2k.ab.ca;

b=c7uMESDSGOUMfoq2OPZcnT/Lix2rzJZCt1UhGXh8w/VDe3PA2/+cpXZ3I0d31sXFShevhlekIwjp

7ot+tutx3u2YQ18HxFl6pr0Gf3jgMlIqVcASSJIOtE1/Vt0C9sR15wGUHEYUfztQ/BAbcamiodgk

66SPKT8zQRY2DgKXkMs=;

MIME-Version: 1.0

To: dave@doctor.nl2k.ab.ca

From: UPS Shipping

Subject: You've got 1 package pending for delivery dave!

Content-Type: text/html

X-Spam_score: 19.1

X-Spam_score_int: 191

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Track & Trace Get Your Suspended Package



Content analysis details: (19.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.4 MISSING_DATE Missing Date: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.251.83.57 listed in will-spam-for-food.eu.org]

[87.251.83.57 listed in will-spam-for-food.eu.org]

[87.251.83.57 listed in will-spam-for-food.eu.org]

[87.251.83.57 listed in will-spam-for-food.eu.org]

[87.251.83.57 listed in will-spam-for-food.eu.org]

[87.251.83.57 listed in will-spam-for-food.eu.org]

[87.251.83.57 listed in will-spam-for-food.eu.org]

[87.251.83.57 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.251.83.57 listed in dnsbl.ahbl.org]

[87.251.83.57 listed in dnsbl.ahbl.org]

[87.251.83.57 listed in dnsbl.ahbl.org]

[87.251.83.57 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.251.83.57 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.251.83.57 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.251.83.57 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.251.83.57 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.6 SCC_CANSPAM_2 BODY: Interesting compliance language

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You've got 1 package pending for delivery dave!













Track & Trace





















































Get Your Suspended Package



YOUR PACKAGE IS COMING



You have (1) package waiting for delivery. Use your code to track it and receive it. Schedule your delivery and subscribe to our push notifications to avoid this from happening again!



SCHEDULE YOUR DELIVERY



















Track all your shipments in one place. Keep us close at hand!



View the latest delivery statuses of all your shipments. See also detailed tracking history and expected delivery times for each shipment.



SCHEDULE YOUR DELIVERY





 




If you no longer wish to receive these emails, you may unsubscribe by clicking here or by writing to 1070 Montgomery Rd #2386 Altamonte Springs, FL 32714





 








UPS Phish from Russia

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 09:02:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sveN7-00000000P3X-2xWP

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 09:01:05 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Oct 2024 09:01:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [31.184.251.242] (port=44171 helo=ewequickinbox.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sveLs-00000000OtL-2dhx

for doctor@mail.nl2k.ab.ca;

Tue, 01 Oct 2024 09:00:05 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=mail.nl2k.ab.ca;

h=MIME-Version:To:From:Subject:Content-Type; i=doctor@mail.nl2k.ab.ca;

bh=OtjCFj+oENPMiVPrTLwbeP7PWt8=;

b=asQmOownVvdABbjCm9cAuBtN34VSUrFoUA3vEgy4NC+tVCVmnpovngn7KyaXSZb4j8OnyoDSfEg2

WXogG6wgGJCjfhWDBP62PAOQTQgdpIFLtmzEnOjFuUX083U4Wz1CKzxKPWUcP09wQNALgOvtoUv0

ZyY08iRXQeGsQRF36Gg=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=mail.nl2k.ab.ca;

b=CNqM1lFs27ff1wzOpadfz9JEe0HgYwQrY2ochO5jKTJkQuSPbNJZZvco4tYc/9nB6IOWG0WectMo

IBhCV7ldqR2biEAtGyzFmPEO8QGjsGDYGKYjiAAlo6vLoIiJ1uPeFppTuce8bFu7shSQ/+Ya1RGy

GOQcdpPA7INwEQDz2II=;

MIME-Version: 1.0

To: doctor@mail.nl2k.ab.ca

From: UPS Shipping

Subject: You've got 1 package pending for delivery doctor!

Content-Type: text/html

X-Spam_score: 20.7

X-Spam_score_int: 207

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Track & Trace Get Your Suspended Package



Content analysis details: (20.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.4 MISSING_DATE Missing Date: header

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[31.184.251.242 listed in will-spam-for-food.eu.org]

[31.184.251.242 listed in will-spam-for-food.eu.org]

[31.184.251.242 listed in will-spam-for-food.eu.org]

[31.184.251.242 listed in will-spam-for-food.eu.org]

[31.184.251.242 listed in will-spam-for-food.eu.org]

[31.184.251.242 listed in will-spam-for-food.eu.org]

[31.184.251.242 listed in will-spam-for-food.eu.org]

[31.184.251.242 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[31.184.251.242 listed in dnsbl.ahbl.org]

[31.184.251.242 listed in dnsbl.ahbl.org]

[31.184.251.242 listed in dnsbl.ahbl.org]

[31.184.251.242 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[31.184.251.242 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[31.184.251.242 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[31.184.251.242 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[31.184.251.242 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[31.184.251.242 listed in bb.barracudacentral.org]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.6 SCC_CANSPAM_2 BODY: Interesting compliance language

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You've got 1 package pending for delivery doctor!













Track & Trace





















































Get Your Suspended Package



YOUR PACKAGE IS COMING



You have (1) package waiting for delivery. Use your code to track it and receive it. Schedule your delivery and subscribe to our push notifications to avoid this from happening again!



SCHEDULE YOUR DELIVERY



















Track all your shipments in one place. Keep us close at hand!



View the latest delivery statuses of all your shipments. See also detailed tracking history and expected delivery times for each shipment.



SCHEDULE YOUR DELIVERY





 




If you no longer wish to receive these emails, you may unsubscribe by clicking here or by writing to 1070 Montgomery Rd #2386 Altamonte Springs, FL 32714





 








UPS Phish from Russia

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 09:01:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sveMr-00000000P1m-0QOC

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 09:00:49 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Oct 2024 09:00:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [87.251.81.147] (port=33463 helo=ewdmoburl.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sveKE-00000000OoN-25RH

for support@nk.ca;

Tue, 01 Oct 2024 08:58:15 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nk.ca;

h=MIME-Version:To:From:Subject:Content-Type; i=support@nk.ca;

bh=RZzJ21xkyI6FELSQaRmoMwGELBM=;

b=H0du3JxMCD2qtkJqI0AxHwrU58NZpzdiu4rRMOHeZfsPDNok9etXUBRYrpGqwi9axDBoIoamosJF

CRmLLNYFsVIpiH4dFeLZ8ChZUIfaLwRjpsgJiu+61/5qOOimr6xuSya8rCf3ScOg30lPt3wYuZ0v

dK2q7TeVOGBm/qUs8ho=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nk.ca;

b=ERrk3VPkkrxc3RfgC6bKjAeYvVz08ppW+Zf9ZtvBRX17N0YZpH4EPM2gV5tH14UZBlfRvlIF68W6

kNngnTEk1mDYNbKIP7TXRT/QxgKWs8gp+wdo9oi7X9T27Z3+QP88zSp3fTIngGHPZa1yhgOJDJTk

PutXl83JyhK6bPAcnNo=;

MIME-Version: 1.0

To: support@nk.ca

From: UPS Shipping

Subject: You've got 1 package pending for delivery support!

Content-Type: text/html

X-Spam_score: 19.1

X-Spam_score_int: 191

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Track & Trace Get Your Suspended Package



Content analysis details: (19.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.4 MISSING_DATE Missing Date: header

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.6 SCC_CANSPAM_2 BODY: Interesting compliance language

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You've got 1 package pending for delivery support!













Track & Trace





















































Get Your Suspended Package



YOUR PACKAGE IS COMING



You have (1) package waiting for delivery. Use your code to track it and receive it. Schedule your delivery and subscribe to our push notifications to avoid this from happening again!



SCHEDULE YOUR DELIVERY



















Track all your shipments in one place. Keep us close at hand!



View the latest delivery statuses of all your shipments. See also detailed tracking history and expected delivery times for each shipment.



SCHEDULE YOUR DELIVERY





 




If you no longer wish to receive these emails, you may unsubscribe by clicking here or by writing to 1070 Montgomery Rd #2386 Altamonte Springs, FL 32714





 








UPS Phish from Russia

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 09:01:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sveMc-00000000P1D-0NP8

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 09:00:34 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Oct 2024 09:00:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [87.251.83.28] (port=59773 helo=rwemyspaceinc.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sveK4-00000000Ooo-10XM

for sales@nk.ca;

Tue, 01 Oct 2024 08:58:02 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nk.ca;

h=MIME-Version:To:From:Subject:Content-Type; i=sales@nk.ca;

bh=U0LYhCv0qRpqrWQMLZZKmrassP8=;

b=0znfJvws8CQOrxG5PNqpQ46F2IxXjNb1rwGY6hMhT+3hGP1VyqREC+d359eF+u3O+bPm1eZAMO8S

7ymWNiQjY8NCk0PJekKladaAJRPfumEAXvXAqh8SzPkrrei70dCb4h5jgnlaq46gTdneNdkcvyWz

Qlo2015wWkjYAaVQIuo=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nk.ca;

b=GlODGzGM9fKytrHr2m2KRMVFf7CgCRtFxflliT9vcDncyFvExN3Pn4dDeY6ooKjIPvtCq9lcrmo5

xPxxUfaDMy6JKL1sJpEChygPlD8d7UfOdupm/+XqjCWXvvGI69l83KPMg2GZpaEiaCA7iztIJHLy

g3ILeBvHnDQYejIxfEU=;

MIME-Version: 1.0

To: sales@nk.ca

From: UPS Shipping

Subject: You've got 1 package pending for delivery sales!

Content-Type: text/html

X-Spam_score: 19.8

X-Spam_score_int: 198

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Track & Trace Get Your Suspended Package



Content analysis details: (19.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.4 MISSING_DATE Missing Date: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.251.83.28 listed in will-spam-for-food.eu.org]

[87.251.83.28 listed in will-spam-for-food.eu.org]

[87.251.83.28 listed in will-spam-for-food.eu.org]

[87.251.83.28 listed in will-spam-for-food.eu.org]

[87.251.83.28 listed in will-spam-for-food.eu.org]

[87.251.83.28 listed in will-spam-for-food.eu.org]

[87.251.83.28 listed in will-spam-for-food.eu.org]

[87.251.83.28 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.251.83.28 listed in dnsbl.ahbl.org]

[87.251.83.28 listed in dnsbl.ahbl.org]

[87.251.83.28 listed in dnsbl.ahbl.org]

[87.251.83.28 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.251.83.28 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.251.83.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.251.83.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.251.83.28 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.6 SCC_CANSPAM_2 BODY: Interesting compliance language

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You've got 1 package pending for delivery sales!













Track & Trace





















































Get Your Suspended Package



YOUR PACKAGE IS COMING



You have (1) package waiting for delivery. Use your code to track it and receive it. Schedule your delivery and subscribe to our push notifications to avoid this from happening again!



SCHEDULE YOUR DELIVERY



















Track all your shipments in one place. Keep us close at hand!



View the latest delivery statuses of all your shipments. See also detailed tracking history and expected delivery times for each shipment.



SCHEDULE YOUR DELIVERY





 




If you no longer wish to receive these emails, you may unsubscribe by clicking here or by writing to 1070 Montgomery Rd #2386 Altamonte Springs, FL 32714





 








UPS Phish from Russia

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 09:01:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sveN2-00000000P2c-2Lzh

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 09:01:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Oct 2024 09:01:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [95.213.139.115] (port=33341 helo=pokemailew.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sveKy-00000000OqW-0fhG

for root@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 08:59:06 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=doctor.nl2k.ab.ca;

h=MIME-Version:To:From:Subject:Content-Type; i=root@doctor.nl2k.ab.ca;

bh=ZMmOgkpihp0SCFUDtKgJgaXEkXo=;

b=QMinlQekDsa+OSjErWBNqyUXmiD8mCFGsLjuam72MPIlxWiTuv9+6WcTIXYbSnHC2NHkpgea7sS6

xmm7z9TjwE1Ra2v8D9Bzisr7dVc5KB66wxzM0hgNinFlHpnGW//BRGkYaJfzLZCiZzvFHtIAJn5c

30Ts8UcCn3GhP59aSEs=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=doctor.nl2k.ab.ca;

b=xI1nVwohF3p1XuN5eRNJcUzV2d0SeGM3DpbbwBDG5EW+CS2zYyyB34KSEi5sB0HQIXxHNWU/AoyY

RlWWK4fK6ACTxeB9tiKoECCsKoYuQinNcaf9YfsrHDVxpVIiJMAvn5FxAocPl8krbTpGcaERvdAZ

/zW+LhSak5TgNhe5HZo=;

MIME-Version: 1.0

To: root@doctor.nl2k.ab.ca

From: UPS Shipping

Subject: You've got 1 package pending for delivery root!

Content-Type: text/html

X-Spam_score: 19.0

X-Spam_score_int: 190

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Track & Trace Get Your Suspended Package



Content analysis details: (19.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.4 MISSING_DATE Missing Date: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

[95.213.139.115 listed in dnsbl.ahbl.org]

[95.213.139.115 listed in dnsbl.ahbl.org]

[95.213.139.115 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[95.213.139.115 listed in wl.mailspike.net]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 SCC_CANSPAM_2 BODY: Interesting compliance language

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You've got 1 package pending for delivery root!













Track & Trace





















































Get Your Suspended Package



YOUR PACKAGE IS COMING



You have (1) package waiting for delivery. Use your code to track it and receive it. Schedule your delivery and subscribe to our push notifications to avoid this from happening again!



SCHEDULE YOUR DELIVERY



















Track all your shipments in one place. Keep us close at hand!



View the latest delivery statuses of all your shipments. See also detailed tracking history and expected delivery times for each shipment.



SCHEDULE YOUR DELIVERY





 




If you no longer wish to receive these emails, you may unsubscribe by clicking here or by writing to 1070 Montgomery Rd #2386 Altamonte Springs, FL 32714





 








UPS Phish from Russia

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 09:01:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sveMv-00000000P27-2Yms

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 09:00:53 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Oct 2024 09:00:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [95.213.139.115] (port=41019 helo=pokemailew.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sveLS-00000000OsR-3e8j

for root@nl2k.ab.ca;

Tue, 01 Oct 2024 08:59:30 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;

h=MIME-Version:To:From:Subject:Content-Type; i=root@nl2k.ab.ca;

bh=mKB1su02NpUp6vgHMgp3CmPO33Q=;

b=1QsliXkcC7+qcT9FIrlVD/H4pdzsRMOjLTCpCXwQafA9AlCNNQsQOSryatldDl6I11yZExithNbf

Vw0ymH05xteLHFcMVs9lnXVmU9fbHdznGGu32QCV0hZQ3pEwrZB8CChj0a453QUYmhoQE2JDYE+y

GZ1lybBIxDstZKH7TGA=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;

b=TulvKJzCsrOOpwj+0XGP4szSk8Lg+Hxl3E7BqEuIW8txmvOZ1X4mAQSRewcOVPEF2YLIj5J+jJFE

Mb8zVy3WW9eJIZ+cKOCUSHoZ0yIot/rkR0DEe+xksoDwIVAhFLipmNetU3kOncpmqAdRxQPnKSLR

Q1xF6q/3rFzCo3cwYOg=;

MIME-Version: 1.0

To: root@nl2k.ab.ca

From: UPS Shipping

Subject: You've got 1 package pending for delivery root!

Content-Type: text/html

X-Spam_score: 19.0

X-Spam_score_int: 190

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Track & Trace Get Your Suspended Package



Content analysis details: (19.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.4 MISSING_DATE Missing Date: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

[95.213.139.115 listed in dnsbl.ahbl.org]

[95.213.139.115 listed in dnsbl.ahbl.org]

[95.213.139.115 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[95.213.139.115 listed in wl.mailspike.net]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 SCC_CANSPAM_2 BODY: Interesting compliance language

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You've got 1 package pending for delivery root!













Track & Trace





















































Get Your Suspended Package



YOUR PACKAGE IS COMING



You have (1) package waiting for delivery. Use your code to track it and receive it. Schedule your delivery and subscribe to our push notifications to avoid this from happening again!



SCHEDULE YOUR DELIVERY



















Track all your shipments in one place. Keep us close at hand!



View the latest delivery statuses of all your shipments. See also detailed tracking history and expected delivery times for each shipment.



SCHEDULE YOUR DELIVERY





 




If you no longer wish to receive these emails, you may unsubscribe by clicking here or by writing to 1070 Montgomery Rd #2386 Altamonte Springs, FL 32714





 








UPS Phish from Russia

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 09:01:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sveMh-00000000P1P-3P0n

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 09:00:39 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Oct 2024 09:00:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [95.213.139.115] (port=33341 helo=pokemailew.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sveKo-00000000OqW-1fV2

for doctor@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 08:58:51 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=doctor.nl2k.ab.ca;

h=MIME-Version:To:From:Subject:Content-Type; i=doctor@doctor.nl2k.ab.ca;

bh=KjYkYax56qbfCFpYoGldgU4kFlg=;

b=J8hY3AjxnD6Bk8AnU6imfx7ubV4VTcrYStTj5IVTlcUq6l3w9zCBoLgxpjqnFZ6Fe2mqL3Zmb4SK

J5qT8g0J6I51ETj6HM4zF2frGuSSVIdHBUsSF6nF8QwZkSPz5wrSgo1VTAsazCLVcU5dIGpWQC0E

IOc+ivo4xg8WM4V+P48=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=doctor.nl2k.ab.ca;

b=A6Mc6whxVW4Ebfpgm1X5webrPG7wSGHtCUansvyEWfkYlNwUcZWyD8zHqNNpVkIUD+gHsS9AKh68

zPRgIEDob2w5ZVmabEHh1ULnCWaU1BCiyuuI6vaSyNvPNUJdRg8PeouXAzHNvHnuxczUuCyz0N6z

Th2+kD368SCmIsafo1g=;

MIME-Version: 1.0

To: doctor@doctor.nl2k.ab.ca

From: UPS Shipping

Subject: You've got 1 package pending for delivery doctor!

Content-Type: text/html

X-Spam_score: 19.0

X-Spam_score_int: 190

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Track & Trace Get Your Suspended Package



Content analysis details: (19.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.4 MISSING_DATE Missing Date: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

[95.213.139.115 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

[95.213.139.115 listed in dnsbl.ahbl.org]

[95.213.139.115 listed in dnsbl.ahbl.org]

[95.213.139.115 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[95.213.139.115 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[95.213.139.115 listed in wl.mailspike.net]

0.6 SCC_CANSPAM_2 BODY: Interesting compliance language

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You've got 1 package pending for delivery doctor!













Track & Trace





















































Get Your Suspended Package



YOUR PACKAGE IS COMING



You have (1) package waiting for delivery. Use your code to track it and receive it. Schedule your delivery and subscribe to our push notifications to avoid this from happening again!



SCHEDULE YOUR DELIVERY



















Track all your shipments in one place. Keep us close at hand!



View the latest delivery statuses of all your shipments. See also detailed tracking history and expected delivery times for each shipment.



SCHEDULE YOUR DELIVERY





 




If you no longer wish to receive these emails, you may unsubscribe by clicking here or by writing to 1070 Montgomery Rd #2386 Altamonte Springs, FL 32714





 








UPS Phish from Russia

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 09:01:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sveMX-00000000P0t-00gz

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 09:00:29 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Oct 2024 09:00:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [87.251.81.147] (port=37997 helo=ewdmoburl.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sveJc-00000000Ona-122q

for games@nl2k.ab.ca;

Tue, 01 Oct 2024 08:57:48 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;

h=MIME-Version:To:From:Subject:Content-Type; i=games@nl2k.ab.ca;

bh=iu1w7DkclqwW93Scl8jRvymSa6c=;

b=2mvSAu3KcHXa6gwwnPiS+/0fD6lqt4GwOkh5QQWFE2Qmni6pmiCasIuZ5sqoyBSK7fpv5KyddUe7

yQwxr+ZCQeu/1NTI+Dq66++k2thnNcO3PDce7cTFcESAu831IZf+thMq5BSWnH5aowmel4TAJbqF

lNiM/WFiGR9B4c3HN78=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;

b=XBgRMMxKq5hZOZNvWJz12KPHvuCQ5PR4uNueSvEUkn/yz6xbvRlV32jhkf3jPzYbB5NLdQS5fXcf

V29zAMCyS3LVxNH8XcL5cPIFHQLvV4FSOgYE1mU2h3zKBVz8hQbhz0cMAxJzZfZJJ5DBuxV/u1K6

CI5Ut2j7bA0bMDvscXI=;

MIME-Version: 1.0

To: games@nl2k.ab.ca

From: UPS Shipping

Subject: You've got 1 package pending for delivery games!

Content-Type: text/html

X-Spam_score: 19.1

X-Spam_score_int: 191

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Track & Trace Get Your Suspended Package



Content analysis details: (19.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.4 MISSING_DATE Missing Date: header

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.6 SCC_CANSPAM_2 BODY: Interesting compliance language

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You've got 1 package pending for delivery games!













Track & Trace





















































Get Your Suspended Package



YOUR PACKAGE IS COMING



You have (1) package waiting for delivery. Use your code to track it and receive it. Schedule your delivery and subscribe to our push notifications to avoid this from happening again!



SCHEDULE YOUR DELIVERY



















Track all your shipments in one place. Keep us close at hand!



View the latest delivery statuses of all your shipments. See also detailed tracking history and expected delivery times for each shipment.



SCHEDULE YOUR DELIVERY





 




If you no longer wish to receive these emails, you may unsubscribe by clicking here or by writing to 1070 Montgomery Rd #2386 Altamonte Springs, FL 32714





 








UPS Phish from Russia

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 09:01:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sveMT-00000000P0i-1eeH

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 09:00:25 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Oct 2024 09:00:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [87.251.81.147] (port=46387 helo=ewdmoburl.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sveJb-00000000Oo7-44ro

for sales@netknow.ca;

Tue, 01 Oct 2024 08:57:36 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=netknow.ca;

h=MIME-Version:To:From:Subject:Content-Type; i=sales@netknow.ca;

bh=ODWGdtqP7BK/0TP86HN+Ww4ey9s=;

b=ldo1LFGbWC5+uAjIZGau71basM8z0f9irA3h55fskojFS8zejavf6M9CuYQZGXxcEMpmvqpsdGkS

7MWj/tQvNZCCnPoggWDw216S60JFPU1Qlfo8jrtYWMDSTbNnP1rwaOefYlHyIIlmTVCkbexe3g+3

TOOpdQ5IsTV7d8DsqKc=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=netknow.ca;

b=q1bN8kGjNTneeTHR6EYEu56Lxt0EVZn+Sox85VkTYr7ECNadFZpdGCiBaacT6tMfL3WzWXUXYzEM

h6w1dhPHSI2ZyZWCLG9LIGBsgZ7XX5qOHMLnk9HrnZ3m9LQ0swHqBzo3YIPE23jlhc0m+IsA9f0A

4PYGzaWNI6DXubedeiM=;

MIME-Version: 1.0

To: sales@netknow.ca

From: UPS Shipping

Subject: You've got 1 package pending for delivery sales!

Content-Type: text/html

X-Spam_score: 19.8

X-Spam_score_int: 198

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Track & Trace Get Your Suspended Package



Content analysis details: (19.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.4 MISSING_DATE Missing Date: header

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.6 SCC_CANSPAM_2 BODY: Interesting compliance language

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You've got 1 package pending for delivery sales!













Track & Trace





















































Get Your Suspended Package



YOUR PACKAGE IS COMING



You have (1) package waiting for delivery. Use your code to track it and receive it. Schedule your delivery and subscribe to our push notifications to avoid this from happening again!



SCHEDULE YOUR DELIVERY



















Track all your shipments in one place. Keep us close at hand!



View the latest delivery statuses of all your shipments. See also detailed tracking history and expected delivery times for each shipment.



SCHEDULE YOUR DELIVERY





 




If you no longer wish to receive these emails, you may unsubscribe by clicking here or by writing to 1070 Montgomery Rd #2386 Altamonte Springs, FL 32714





 








UPS Phish from Russia

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 09:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sveMm-00000000P1Z-0Mix

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 09:00:44 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Oct 2024 09:00:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [87.251.81.147] (port=37997 helo=ewdmoburl.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sveKA-00000000Ona-2a0J

for doctor@nl2k.ab.ca;

Tue, 01 Oct 2024 08:58:18 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;

h=MIME-Version:To:From:Subject:Content-Type; i=doctor@nl2k.ab.ca;

bh=EgECHvkNQW+ut6uG8p62/fBO97E=;

b=smk7sEIKLQ6hCIz3MyvTjRm49dSNWtZTmPt24G+06uycg8z6yIrxy7wfEDEeWJhuT8N8zrWMHbE5

MLpA5dDLD3XBHBBNDjG9JYDlTFUeUwRtkVYJsj3riWro6M/wks8whROZTvZu6EbPULimDFwyK+N/

B8Uu4tsQpSVPf9Mt3Pg=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;

b=KpzKdib03CRvZbeb5RKEiWZn73nAh+howC6egXhybqknHveVHw3HdgCwUb2z+ZgILvjy6yMElDDY

bw62KWoCiQJ608DZtVymyDEuhGiJBUz8545iZno1KnGk6Jt97un4XgdDTpmlhzVAr0LfkZLx/dX7

E5ZLEM4UgQJsYRecVaM=;

MIME-Version: 1.0

To: doctor@nl2k.ab.ca

From: UPS Shipping

Subject: You've got 1 package pending for delivery doctor!

Content-Type: text/html

X-Spam_score: 19.1

X-Spam_score_int: 191

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Track & Trace Get Your Suspended Package



Content analysis details: (19.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.4 MISSING_DATE Missing Date: header

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.6 SCC_CANSPAM_2 BODY: Interesting compliance language

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You've got 1 package pending for delivery doctor!













Track & Trace





















































Get Your Suspended Package



YOUR PACKAGE IS COMING



You have (1) package waiting for delivery. Use your code to track it and receive it. Schedule your delivery and subscribe to our push notifications to avoid this from happening again!



SCHEDULE YOUR DELIVERY



















Track all your shipments in one place. Keep us close at hand!



View the latest delivery statuses of all your shipments. See also detailed tracking history and expected delivery times for each shipment.



SCHEDULE YOUR DELIVERY





 




If you no longer wish to receive these emails, you may unsubscribe by clicking here or by writing to 1070 Montgomery Rd #2386 Altamonte Springs, FL 32714





 








UPS Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path: <>

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 08:58:04 -0600

Received: from [87.251.81.147] (port=37997 helo=ewdmoburl.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1sveJx-00000000Ona-11Wp

for dave@nl2k.ab.ca;

Tue, 01 Oct 2024 08:58:02 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;

h=MIME-Version:To:From:Subject:Content-Type; i=dave@nl2k.ab.ca;

bh=/V33trRV2O4a4gsmrYEBO/zx9FY=;

b=PNN3U1am57o7lgJwQjsQZo+Q7cEvscMwaJxkBtGUB3wxJB55Ix9l+Q1gyp8vbriRTr/i9fwp8ph9

TPIw/sw+4bOEELKQSzmfyPxskrpXRpSaPrL5XzdKzEh/t/Ll9I7N6JG27LJUAl9fgrNbGK9ae3vK

9Tr7oC6P4WS0i58U2KU=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;

b=0TliJ/lJugEbBPr9VCzhLfKaFpEB85wExNWrIalrAEjplTbC/V+eWrfQZmpNurI7wedJEQPXXUW2

3fI8fmXMMDHNo914mBpp6dgDmDhyXrVa1+CDIyne/XnioCx/IpYwRfK942TehiXga+VcyP6+c8U5

zdHFCSHC9ept83E/UBg=;

MIME-Version: 1.0

To: dave@nl2k.ab.ca

From: UPS Shipping

Subject: You've got 1 package pending for delivery dave!

Content-Type: text/html

X-Spam_score: 19.1

X-Spam_score_int: 191

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Track & Trace Get Your Suspended Package



Content analysis details: (19.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.4 MISSING_DATE Missing Date: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

[87.251.81.147 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

[87.251.81.147 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.251.81.147 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.6 SCC_CANSPAM_2 BODY: Interesting compliance language

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} You've got 1 package pending for delivery dave!













Track & Trace





















































Get Your Suspended Package



YOUR PACKAGE IS COMING



You have (1) package waiting for delivery. Use your code to track it and receive it. Schedule your delivery and subscribe to our push notifications to avoid this from happening again!



SCHEDULE YOUR DELIVERY



















Track all your shipments in one place. Keep us close at hand!



View the latest delivery statuses of all your shipments. See also detailed tracking history and expected delivery times for each shipment.



SCHEDULE YOUR DELIVERY





 




If you no longer wish to receive these emails, you may unsubscribe by clicking here or by writing to 1070 Montgomery Rd #2386 Altamonte Springs, FL 32714





 








nk.ca credential phishing

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Oct 2024 08:48:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sve9d-00000000OWt-0YEN

for dave@doctor.nl2k.ab.ca;

Tue, 01 Oct 2024 08:47:09 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Oct 2024 08:47:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.75.76.118] (port=36278 helo=tonyhai.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1svdjq-00000000NPM-3ZiF

for doctor@netknow.ca;

Tue, 01 Oct 2024 08:20:57 -0600

Received: from [127.0.0.1] (ec2-52-68-53-11.ap-northeast-1.compute.amazonaws.com [52.68.53.11])

by tonyhai.com (Postfix) with ESMTPA id 6FE596F6FB

for ; Tue, 1 Oct 2024 16:17:23 +0200 (CEST)

Content-Type: text/html; charset=utf-8

From: "Netknow-team"

To: doctor@netknow.ca

Subject: =?UTF-8?B?8J+UkiBBZGQgcmVjb3Zlcnkgb3B0aW9ucy4=?=

Message-ID:

X-Priority: 1 (Highest)

X-Msmail-Priority: High

Importance: High

Content-Transfer-Encoding: quoted-printable

Date: Tue, 01 Oct 2024 14:17:23 +0000

MIME-Version: 1.0

X-Spam_score: 22.4

X-Spam_score_int: 224

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: To keep your email account safe, we recommend you add a recovery

email or mobile number. This is our new security measure.



Content analysis details: (22.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.68.53.11 listed in will-spam-for-food.eu.org]

[52.68.53.11 listed in will-spam-for-food.eu.org]

[52.68.53.11 listed in will-spam-for-food.eu.org]

[52.68.53.11 listed in will-spam-for-food.eu.org]

[52.68.53.11 listed in will-spam-for-food.eu.org]

[52.68.53.11 listed in will-spam-for-food.eu.org]

[52.68.53.11 listed in will-spam-for-food.eu.org]

[52.68.53.11 listed in will-spam-for-food.eu.org]

[103.75.76.118 listed in will-spam-for-food.eu.org]

[103.75.76.118 listed in will-spam-for-food.eu.org]

[103.75.76.118 listed in will-spam-for-food.eu.org]

[103.75.76.118 listed in will-spam-for-food.eu.org]

[103.75.76.118 listed in will-spam-for-food.eu.org]

[103.75.76.118 listed in will-spam-for-food.eu.org]

[103.75.76.118 listed in will-spam-for-food.eu.org]

[103.75.76.118 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.68.53.11 listed in dnsbl.ahbl.org]

[52.68.53.11 listed in dnsbl.ahbl.org]

[52.68.53.11 listed in dnsbl.ahbl.org]

[52.68.53.11 listed in dnsbl.ahbl.org]

[103.75.76.118 listed in dnsbl.ahbl.org]

[103.75.76.118 listed in dnsbl.ahbl.org]

[103.75.76.118 listed in dnsbl.ahbl.org]

[103.75.76.118 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.68.53.11 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.68.53.11 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.68.53.11 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.68.53.11 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: tlslver.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: tlslver.com]

1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 WEIRD_PORT URI: Uses non-standard port number for HTTP

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_FROM_12LTRDOM From a 12-letter domain

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

Subject: {SPAM?} =?UTF-8?B?8J+UkiBBZGQgcmVjb3Zlcnkgb3B0aW9ucy4=?=










tible" content=3D"IE=3Dedge">






border-image: none; max-width: 680px;" border=3D"0" cellspacing=3D"0" =

cellpadding=3D"0">








style=3D"font-family:; font-size: 16px;" helvetica=3D"" neue",=3D"" =

helvetica,=3D"" arial,=3D"" sans-serif;=3D"" rgb(51,51,51)"=3D"">
width=3D"189" height=3D"66" id=3D"_x0000_i1025" style=3D"width: 41px; =

height: 39px;" alt=3D"" src=3D"https://www.google.com/s2/favicons?=

domain=3Dnetknow.ca" border=3D"0">

style=3D"border-width: 2px; border-style: solid; border-color: rgb(232, 232=

, 232) rgb(232, 232, 232) rgb(255, 108, 44); padding: 15px 0px 20px; =

background-color: rgb(255, 255, 255);">


style=3D"font-family:;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" =

helvetica=3D"" neue",=3D"" helvetica,=3D"" arial,=3D"" sans-serif;=3D"" =

rgb(255,255,255)"=3D"">










cellpadding=3D"0">












style=3D"font-family: calibri; font-size: medium;">To keep your email =

account safe, we recommend you add a recovery email or mobile number.=



This is =

our new security measure.
=



Email: =

doctor
@****(Hidden for =

safety)

Recovery email or number: none yet



You should follow the link below to add recovery =

email or phone number. Use the security option tools at

=C2=A0
href=3D"https://tlslver.com/ml/#doctor@netknow.ca" target=3D"_blank">

https://netknow.ca:2083/?got.app=3DRecovery/options/doctor.=




102); padding-top: 5px; font-family: "Helvetica Neue", Helvetica, Arial, =

sans-serif; font-size: 12px; margin-top: 5px; border-top-color: rgb(232, =

232, 232); border-top-width: 2px; border-top-style: solid;'>

The system generated this =

notice on 14:17



You can disable the "Security =

Options=C2=A0Warning" type of notification through the netknow.ca =

interface:

=C2=A0
.ca" href=3D"https://tlslver.com/ml/#doctor@netknow.ca" target=3D"_blank">

https://netknow.ca:2083/?got app=3DSecurityInfo Optoins.=




medium;">However, if you do

not add=C2=A0recovery=C2=A0email =

or=C2=A0mobile number,netknow.ca support wouldn't be

held responsible for any future damages.



Do not reply to this automated message.


d>







102); font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; =

font-size: 12px;'>Copyright =C2=A9=C2=A02024 -=C2=A0 =

Netknow