Dating phish
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 23 Jun 2022 04:56:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1o4KUN-000Kmw-Oq
for dave@doctor.nl2k.ab.ca;
Thu, 23 Jun 2022 04:55:07 -0600
Resent-From: The Doctor
Resent-Date: Thu, 23 Jun 2022 04:55:07 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [112.48.53.239] (port=50053 helo=51.214.240.35.bc.googleusercontent.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from)
id 1o4EbL-000DhR-6F
for doctor@nk.ca;
Wed, 22 Jun 2022 22:37:59 -0600
Message-ID:
Date: Thu, 23 Jun 2022 03:37:52 +0300
From: "adult dating"
X-Accept-Language: en-us
MIME-Version: 1.0
To:
Subject: hallo
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Spam_score: 16.9
X-Spam_score_int: 169
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I thought that to play with two guys at once will surely be
a outstanding idea. To tell the truth, it was actually really uninspiring,
possibly problem in poor bad partners? I really wish to meet a ta [...]
Content analysis details: (16.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.9 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[112.48.53.239 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: applicate.zone]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: applicate.zone]
Subject: {SPAM?} hallo
I thought that to play with two guys at once will surely be a outstanding
idea. To tell the truth, it was actually really uninspiring, possibly
problem in poor bad partners? I really wish to meet a talented hunk wh
o can easily make me scream and shed tears & who aren't afraid of great new
emotions. I also would never be against to try triple-some with my
girl-friend
In case you're anxious to feel me and one other young girl,
our photos are in my page) In case u really enjoy us, we're ready to offer U
hotter pics and face in real life
http://applicate.zone/g/
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 23 Jun 2022 04:56:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1o4KUN-000Kmw-Oq
for dave@doctor.nl2k.ab.ca;
Thu, 23 Jun 2022 04:55:07 -0600
Resent-From: The Doctor
Resent-Date: Thu, 23 Jun 2022 04:55:07 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [112.48.53.239] (port=50053 helo=51.214.240.35.bc.googleusercontent.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from
id 1o4EbL-000DhR-6F
for doctor@nk.ca;
Wed, 22 Jun 2022 22:37:59 -0600
Message-ID:
Date: Thu, 23 Jun 2022 03:37:52 +0300
From: "adult dating"
X-Accept-Language: en-us
MIME-Version: 1.0
To:
Subject: hallo
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Spam_score: 16.9
X-Spam_score_int: 169
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I thought that to play with two guys at once will surely be
a outstanding idea. To tell the truth, it was actually really uninspiring,
possibly problem in poor bad partners? I really wish to meet a ta [...]
Content analysis details: (16.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.9 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[112.48.53.239 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: applicate.zone]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: applicate.zone]
Subject: {SPAM?} hallo
I thought that to play with two guys at once will surely be a outstanding
idea. To tell the truth, it was actually really uninspiring, possibly
problem in poor bad partners? I really wish to meet a talented hunk wh
o can easily make me scream and shed tears & who aren't afraid of great new
emotions. I also would never be against to try triple-some with my
girl-friend
In case you're anxious to feel me and one other young girl,our photos are in my page) In case u really enjoy us, we're ready to offer U
hotter pics and face in real life
http://applicate.zone/g/
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments