IPTV spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 Nov 2024 13:03:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tClTF-0000000090P-2FSF

for dave@doctor.nl2k.ab.ca;

Sun, 17 Nov 2024 13:02:09 -0700

Resent-From: The Doctor

Resent-Date: Sun, 17 Nov 2024 13:02:09 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 28.81.187.35.bc.googleusercontent.com ([35.187.81.28]:60724 helo=cs-903149891883-default.europe-west1-b.c.t71947723978b23cc-tp.internal)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCl1l-000000006be-1f2h

for sales@nk.ca;

Sun, 17 Nov 2024 12:33:53 -0700

Received: from cs-903149891883-default (localhost [127.0.0.1])

by cs-903149891883-default.europe-west1-b.c.t71947723978b23cc-tp.internal (Postfix) with ESMTP id 9E42644B377

for ; Sun, 17 Nov 2024 19:23:01 +0000 (UTC)

Date: Sun, 17 Nov 2024 19:23:01 +0000

To: sales@nk.ca

From: =?iso-8859-1?Q?=F0=9F=8E=89_Welcome_to_IPTV_World_-_Start_Watching_Today!?=

Reply-To: David

Subject: =?iso-8859-1?Q?=F0=9F=93=BA_Enjoy_High-Quality_Streaming_with_IPTV_World!?=

Message-ID: <7QpU6swAjx7eAWeRk5GTLsMf8UDE1voH65qFVKSbxVM@cs-903149891883-default>

X-Mailer: PHPMailer 6.9.1 (https://github.com/PHPMailer/PHPMailer)

MIME-Version: 1.0

Content-Type: text/html; charset=iso-8859-1

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: IPTV Email Welcome to IPTV World



Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.187.81.28 listed in dnsbl.ahbl.org]

[35.187.81.28 listed in dnsbl.ahbl.org]

[35.187.81.28 listed in dnsbl.ahbl.org]

[35.187.81.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.187.81.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.187.81.28 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.187.81.28 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.187.81.28 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

0.0 TVD_RCVD_IP Message was received from an IP address

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[35.187.81.28 listed in wl.mailspike.net]

0.3 SPECIAL_OFFER BODY: Special Offer

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?iso-8859-1?Q?=F0=9F=93=BA_Enjoy_High-Quality_Streaming_with_IPTV_World!?=













IPTV Email











IPTV spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 Nov 2024 13:03:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tClT9-00000000909-045x

for dave@doctor.nl2k.ab.ca;

Sun, 17 Nov 2024 13:02:03 -0700

Resent-From: The Doctor

Resent-Date: Sun, 17 Nov 2024 13:02:02 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 28.81.187.35.bc.googleusercontent.com ([35.187.81.28]:52504 helo=cs-903149891883-default.europe-west1-b.c.t71947723978b23cc-tp.internal)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCkyk-000000006Mo-1zaU

for root@nk.ca;

Sun, 17 Nov 2024 12:30:53 -0700

Received: from cs-903149891883-default (localhost [127.0.0.1])

by cs-903149891883-default.europe-west1-b.c.t71947723978b23cc-tp.internal (Postfix) with ESMTP id D25964A8376

for ; Sun, 17 Nov 2024 19:20:06 +0000 (UTC)

Date: Sun, 17 Nov 2024 19:20:06 +0000

To: root@nk.ca

From: =?iso-8859-1?Q?=F0=9F=8E=89_Welcome_to_IPTV_World_-_Start_Watching_Today!?=

Reply-To: David

Subject: =?iso-8859-1?Q?=F0=9F=93=BA_Enjoy_High-Quality_Streaming_with_IPTV_World!?=

Message-ID:

X-Mailer: PHPMailer 6.9.1 (https://github.com/PHPMailer/PHPMailer)

MIME-Version: 1.0

Content-Type: text/html; charset=iso-8859-1

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: IPTV Email Welcome to IPTV World



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.187.81.28 listed in dnsbl.ahbl.org]

[35.187.81.28 listed in dnsbl.ahbl.org]

[35.187.81.28 listed in dnsbl.ahbl.org]

[35.187.81.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.187.81.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.187.81.28 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.187.81.28 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.187.81.28 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

[35.187.81.28 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[35.187.81.28 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 TVD_RCVD_IP Message was received from an IP address

0.3 SPECIAL_OFFER BODY: Special Offer

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?iso-8859-1?Q?=F0=9F=93=BA_Enjoy_High-Quality_Streaming_with_IPTV_World!?=













IPTV Email











Elon Musk electricity savings spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 Nov 2024 05:33:05 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCeRh-000000006vO-0DDS

for dave@doctor.nl2k.ab.ca;

Sun, 17 Nov 2024 05:32:05 -0700

Resent-From: The Doctor

Resent-Date: Sun, 17 Nov 2024 05:32:04 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-am0eur02hn2239.outbound.protection.outlook.com ([52.100.202.239]:25952 helo=EUR02-AM0-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCds5-000000004L5-1M5B

for doctor@doctor.nl2k.ab.ca;

Sun, 17 Nov 2024 04:56:09 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=KxmRbW5WzlJ4OFwfB8NhO87LBfC4hKslOnpjDbDpQojDn5XI3BvXfnSsg6ejvnAoW/6QdmZK7MTwgqqyu1n867zOnNsdvYsnmv0vZN4aRRQamkBUUfuwhP21+91at+61PyyV9mz9O+89+5m0HF74rLGq5ciqncKfAiFNxYyRjAzZPwdPHXoJN5PFINYoKXqcChirV0rhpUq7xbMRt9jfXP7QjvevuWjVKmA0Evitco0oS04woZFfp0YwFpM7nEuRtOz1KypSixtkUOD9P3Ds7Ffh7rJnn4fBa8SLJZNCQHli7NBDPnv4aqmwmBi2QqjhEnA6wy7m8Gbf7oc1dZXF1w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=xARJiS7FDHhspZ5vJDo1VymHwEIMIRnRJizUxmomwhs=;

b=Vpuk84ctyFMRrKeA0s8i3NMh8bD/RdqgpyKd7xQIWzd9XaSXVnGDnODpdVa0SrfMYEVJt2MNh0owWhZ9ZDwcbfF0Zgw1pEkMawIlvCKX20SJtko0Ivnz66GPYzlf+6R5yRp4Afr1a/hWfm51+qknE9NCbfLU/58Dj4+ZOX9xVsdZEvkL47gu9j+xX3xKR1Lfz7w9rWywog7MLvP8Z4hz6/z+IlXYiDPk9YzTDXmuHHurhQyX/BWA7cLnvjUS4UNG/Ke6zbF15qiOFnMGVYf8DbqGhVdOv1nxrAHC+WTl7M9mmTtQcUZm4OdHmzHolYnVHLSXYV6jDbNB9KOLJ7Rxvg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is

209.85.221.47) smtp.rcpttodomain=kiryatonomunicipality.onmicrosoft.com

smtp.mailfrom=gmail.com; dmarc=pass (p=none sp=quarantine pct=100)

action=none header.from=gmail.com; dkim=fail (signature did not verify)

header.d=amazonses.com; arc=none (0)

Authentication-Results: spf=pass (sender IP is 209.85.221.47)

smtp.mailfrom=gmail.com; dkim=fail (signature did not verify)

header.d=amazonses.com;dmarc=pass action=none header.from=gmail.com;

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1731844217; x=1732449017;

h=feedback-id:mime-version:date:message-id:subject:to

:list-unsubscribe-post:list-unsubscribe:precedence:dkim-signature

:from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=14FTFHG5K41ddfV6L4IjeXiYp58XnH6vCOclYJmSslQ=;

b=NkHoM9q/iNWF+eIZjtX+y3rzNXJh8hx1n2uIbNdZyVABvJrcFaWB8+U8ycF2VyGfrn

92w7obl/WvgkJ2mXnpdtly9zsBiMbivrg6WRdm1fx0PwlsjQbf9LWIxzCtmBSMRbZ07w

7Mr4OSGUv4buCI0HvG1jWJtpGzf4ms9uzBXr/utTfBwzzN7noZPpenc+oaT57sYib3wO

c0LO8Yzib4SDoVBETC+DWpmXyU0KN8mI/DVvu1aMNFJB7mA+q9fTwiK4FWT/QTEtlQBx

wL9f1uG94vQ/9UK/SwfDBmtNf7EdP6kqoMyDDLzjnjeWi+8K7t3EFlPbuxlpwIgTPPfU

MUig==

X-Forwarded-Encrypted: i=1; AJvYcCVCOvLXyWidS7ekbQY68j2bSJ7Hd3j/CwApg6AeMUGMjiuq6vT/n8RKi1yVovaO1hGC5YJ5gk50pQ==@kiryatonomunicipality.onmicrosoft.com

X-Gm-Message-State: AOJu0YxYDYvawB0zIaiUmbvkOEfRSIaQlWombX0PobufcuzoNMjl/Lb5

gvGYVTID57akCCURu8jUNmog6hJ19TZecLdlx+A3mYprC1WOEr1x3rxDQg==

X-Google-Smtp-Source: AGHT+IEpqaeBdcEnAoPp5XRasy/wwMu8x1JSmIetDDapt7g2H4JbhFWgKCLburxMUqU29STBtD9esQ==

X-Received: by 2002:a05:6000:1884:b0:37d:4dcc:7fb4 with SMTP id ffacd0b85a97d-382258f0e24mr6557204f8f.10.1731844217365;

Sun, 17 Nov 2024 03:50:17 -0800 (PST)

From: Elon Musk

X-Google-Original-From: Elon Musk

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1731671498;

h=List-Unsubscribe:List-Unsubscribe-Post:From:To:Subject:Message-ID:Date:MIME-Version:Content-Type:Feedback-ID;

bh=3Lxyv3enr/hUaCC9lNMzrkBeKZOyBvph8Q/pbBE7TQc=;

b=csxQH5X7hhE36LaLNUBQN6fTFs+JCIpGQr2XFBJllNajz4MESAVP0wBEqiDuDn/q

sOzAKNdkJ2c7WdygQcgdIGlA4O65j4wBjB4oPRZaeG5E21VTkXEfWMaAquwuf3JPesc

wDcOYiNk7VgT2gPvN58UtBKT+YmxWSWE99lB5SyA=

Precedence: bulk

X-Rpcampaign: zRWNd99DTu5o3EwMuqDiVwLcvCx3xvB5J

List-Unsubscribe:



List-Unsubscribe-Post: List-Unsubscribe=One-Click

To: VHZWRGZQR@email.amazonses.com

Subject: Elon Musk's New Electricity Saving Invention Has Residents Saving Up to 90% Off Their Monthly Electric Bill.

Message-ID:

Date: Sun, 17 Nov 2024 11:50:15 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed;boundary="=_zRWNd99DTu5o3EwMuqDiVwLcvCx3xvB5J"

Feedback-ID: ::1.us-east-1.sujEy8hsYBhjeaZki4s+DnLwFLr+OOOOCAIQXNILJ=:AmazonSES

X-SES-Outgoing: 2024.11.15-54.240.35.247

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 7986e746-c8f9-402a-87db-3e6ec646b5ef:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic:

AMS1EPF00000043:EE_|DB8PR09MB3577:EE_|VI1PR09MB4207:EE_

X-MS-Office365-Filtering-Correlation-Id: e5e612ca-3870-4e78-3a76-08dd06fe024e

X-LD-Processed: 7986e746-c8f9-402a-87db-3e6ec646b5ef,ExtAddr

X-MS-Exchange-SenderADCheck: 0

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|32142699015|376014|48200799018|61400799027|7416014|9140799003|69100299015|7093399012|4022899009|8096899003|26002699015;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?MkdUcnNhcy93RGR6NEJrT2I2RzZPYW1Ld0lEQ2JEcHRoU3VhQ0ZGcGRpMFBY?=

=?utf-8?B?bktKYzdvam9VQUVyL3BLenc3dTMwYmxNQy9DK0ZJbXhOQ2Z6T1JLUEQyZmVO?=

=?utf-8?B?a0E0MFJoMmZacFN5YWJENVUxaWRYcmthZzlQTE0ySitNTVRnMnJMNHc0RmdV?=

=?utf-8?B?THdBNkhOaVh0ZnNkSWVCdlYwcFpSMnhiM213eTIvQ3NieWJVZGcyaFpHdGMv?=

=?utf-8?B?QzBGbFJzdUJnaHBab2puNmRybm9LUmtydkJqWlErQ1RNNmtvOXRsL3JRSnNn?=

=?utf-8?B?b3FKUldPMU5QMGtRaVZJaDVZU2g4emd5VWtuR1gxSTV6UWNVaFRjYmJSdk85?=

=?utf-8?B?ZzAxN1Y1ODNvNnBabVl5U3hiRDZ6M3B0TTNFVkFsbG84bk9QREx0Q2tHZmk1?=

=?utf-8?B?ZldBQ1RiTmVza3lyc1RhVFF0Z24yakMxcDdubjY4RldqZVlCYWY2VHp5UlFV?=

=?utf-8?B?SGNvcWZ6SEQ3aXFzS3ZRMTBQd211Zjk1Zjh3ajlReFJ4YnFkTHBncUpaVDQ4?=

=?utf-8?B?TUE2Z1NNZU0zZEtFVExsQVNWZWVwT2xBWFI1YVk2M3E1MWszc0tZc29ZV1Zq?=

=?utf-8?B?c2dJS010M29FR0Vjcys1dzN6QUcvQjY1akJrT0hHaHBWNjZYVHdpMkJwWGFQ?=

=?utf-8?B?QjNpdmVWVVY3R2VUbUZKZU03VXJmamhLcXljdTNlWS9GNUk5cENEYVpvOHpP?=

=?utf-8?B?V2hJMk01d21uWmpyelNOREZYZlNHcFdLZWtZVmdPdVFlZDQxTGp6RlJ0NmVG?=

=?utf-8?B?TDVxc29FZnNMRVk3ZThsaTZWUjFBOUZidktkT3ViTmo0UVB6UW5WUEh5bTVo?=

=?utf-8?B?U2VQL1R4NHNuc05RWEVzcTNSSTZZVFU0dUlBcElveTRjblB3Z2JpK0VLc0xs?=

=?utf-8?B?STkyZzcvZVFaR254VVpTTEN0Sm4wV0xXWkNpT2lWak5NcHZqSGpoNW1wbndY?=

=?utf-8?B?WERoRHZmYktGMEVKSm1TNDNGeTU2WmEybVJaaE9oMlkzb2xHeDRnVTVwVXlH?=

=?utf-8?B?U2JlRUl1VTRIWStTejMwV2pyS3NRWW84WEVTbGVhVFRSWk51b3lQWGgwTnc4?=

=?utf-8?B?NkdEN29LcXVxRnBBZGJFajd4dTVXSTJ0MWZoV1phTlYwRUhzNzVHaU56V2ho?=

=?utf-8?B?bXpmYVhxMTFDZDlWY2I0U0NDdVByTm5naTNrVEs0UkVxdzY2ZVM1bVE5Wlkz?=

=?utf-8?B?djRQMFBCaDF6VnBmandkMlBZbCtSak1PckViRndwVmczb0FuMFk1YXl6YXFF?=

=?utf-8?B?ZWVjb3MyUXBzY28wcERMT21UVi9aRTFyZFVFN2QwQ0tBcGxFczl2Z0hKaVI2?=

=?utf-8?B?OURlRlJIMGp4REZudkhpRkI5REt0UkhVd3RnVmRzL3pwNVBOOFU5bEVmMi9h?=

=?utf-8?B?Sk5sSzIyNElkc1VmOW0rUGo4MC9OcGdidHJPVEJGMW9vRXJYYlVYeThNdjF2?=

=?utf-8?B?enV6bFZCSE5JV01sdU5nUFBqd2ZrRlR5ZkNBdGlEWlYwOEMwVndjSHRwZE5s?=

=?utf-8?B?OTI3MXlyUmhSdUhrVTgybkJCdlEyalN5QmIxOEZNb203WHF6cjVsWlowcm9K?=

=?utf-8?B?dHRuSVdlRkxvRVEzckJBdmtvMkh6NFJmRVl2QlJOdWU2UmN6blZHNFBNSVQv?=

=?utf-8?B?bjF0bE1KMXlzTXd3Q1JlZnM1dHQxRzIwclNEY2JSTTVSWklVem84ZVlENDZu?=

=?utf-8?B?a2pVMXQ0U2xYWkRMc0xQZEoyY1pNem01MERtaEpDS0dsSHBCK2FvS0N3N203?=

=?utf-8?B?eDNBRWJkZ1l1NHh5NTU0N0crQ0ZjdkVNZUo5NGVpNVkwVUJIWk9GNVVoZXpS?=

=?utf-8?B?Y254SWhlbzQybkZLaUNMbkpiM1NReGFMU3pkNXIzeWJEemhaQktIN1VzT0kx?=

=?utf-8?B?TWkyb0lGOGlYcng0QW0wSnlGWkYvR3JHcFZWYXlENG44N1JXSzdnNHhLaFRL?=

=?utf-8?B?dDhvMTh2b1Nib2Fzbk1vMkwzSXR5Sm0xNUtYNzEzVXA3QnJsaHhsWlVvRGRZ?=

=?utf-8?B?RnZ0SFAyNnI3bjhCYkl2Y3RoTHNiZU9Zck5SNyt2OTJzQ0Z0THY4aUFBUHll?=

=?utf-8?B?eTZvcGRFcHFxK29QTURnN0srK3NtSTlOT1pwMHNabGsxaVVhQ3B2RGlJM0NR?=

=?utf-8?B?eEZjZVNBMTJmVTlsWm9CVVVUN0RXRUQ2b3ZMajdyU2hlZVBCUEJmaUV2eGlx?=

=?utf-8?B?RDgwbkRycnVtTWI3aWtSdmFjZER5b2ttN3JkeFdjWDFXMk9vK2xSRFNadGZR?=

=?utf-8?B?dUl6TXpCZkM2YkZCOFExTThuTnovTGZnNWpoM21hTVM5MVZUUVBWSDExdXhR?=

=?utf-8?B?dlRjOHMzczdFWS94TnM2VE9mTExKZldvSk5ySmt5bTcxMjIvZUdpUTkzRnNo?=

=?utf-8?B?eERGeUpDZ2NKbHdCTmRRc1hkYVo3cGhZbjNrd3FRZVBoTndKQllBbzBGWWUw?=

=?utf-8?B?SGtSSGdmTTh6TFRrajZrQ3FkSGNQOHM2bUxpZGk3S2wwYW1LMXlvN0NleWtP?=

=?utf-8?B?bzQ4cDNpa2tKYzdOV0hOYTY1alZuU1lOWUtydkNsWHR4cDJBOEJTeUwyRW5a?=

=?utf-8?Q?l4eucFSS4=3D?=

X-Forefront-Antispam-Report:

CIP:209.85.221.47;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail-wr1-f47.google.com;PTR:mail-wr1-f47.google.com;CAT:OSPM;SFS:(13230040)(32142699015)(376014)(48200799018)(61400799027)(7416014)(9140799003)(69100299015)(7093399012)(4022899009)(8096899003)(26002699015);DIR:OUT;SFP:1501;

X-ExternalRecipientOutboundConnectors: 7986e746-c8f9-402a-87db-3e6ec646b5ef

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: kiryatono.muni.il

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Nov 2024 11:50:18.6307

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: e5e612ca-3870-4e78-3a76-08dd06fe024e

X-MS-Exchange-CrossTenant-Id: 7986e746-c8f9-402a-87db-3e6ec646b5ef

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-CrossTenant-AuthSource:

AMS1EPF00000043.eurprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR09MB4207

X-Spam_score: 15.9

X-Spam_score_int: 159

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Sun, 17 Nov 2024 11:50:15 +0000 Elon Musk's New Electricity

Saving Invention Has Residents Saving Up to 90% Off Their Monthly Electric

Bill. ... >



Content analysis details: (15.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.100.202.239 listed in will-spam-for-food.eu.org]

[52.100.202.239 listed in will-spam-for-food.eu.org]

[52.100.202.239 listed in will-spam-for-food.eu.org]

[52.100.202.239 listed in will-spam-for-food.eu.org]

[52.100.202.239 listed in will-spam-for-food.eu.org]

[52.100.202.239 listed in will-spam-for-food.eu.org]

[52.100.202.239 listed in will-spam-for-food.eu.org]

[52.100.202.239 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.100.202.239 listed in dnsbl.ahbl.org]

[52.100.202.239 listed in dnsbl.ahbl.org]

[52.100.202.239 listed in dnsbl.ahbl.org]

[52.100.202.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.100.202.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.100.202.239 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.100.202.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.100.202.239 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.202.239 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.202.239 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is

CUSTOM_MED

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

2.0 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ruthcokpechi(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 HTML_EMBEDS BODY: HTML with embedded plugin object

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area

0.0 T_TVD_MIME_NO_HEADERS BODY: No description available.

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

1.0 MIXED_AREA_CASE Has area tag in mixed case

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.0 T_SCC_CTMPP Uncommon Content-Type

3.5 STYLE_GIBBERISH Nonsense in HTML