Sexual enhancement phish from Hostwinds Seattle Network
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 19 Aug 2022 07:16:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oP1ps-000BvF-2k
for dave@doctor.nl2k.ab.ca;
Fri, 19 Aug 2022 07:14:52 -0600
Resent-From: The Doctor
Resent-Date: Fri, 19 Aug 2022 07:14:52 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [192.236.237.168] (port=50624 helo=ctcmpao.on.ca)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oOtyD-000N2g-V0
for sales@nk.ca;
Thu, 18 Aug 2022 22:51:02 -0600
MIME-Version: 1.0
From: Male Enhancement
Subject: â¤ï¸INCREASED Penis Length & Girthr!ðŸ°
Reply-To: resalesply@on.ca
Received: from on.ca (192.236.237.168) by on.ca id 9jgOQMu2N1J6 for; Fri, 19 Aug 2022 04:31:26 +0200 (envelope-from
To: sales@nk.ca
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="UTF-8"
Date: Fri, 19 Aug 2022 04:31:26 +0200
X-Spam_score: 12.5
X-Spam_score_int: 125
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: If you no longer wish to receive these emails please unsubscribe
here
Content analysis details: (12.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: googleapis.com]
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=ctcmpao.on.ca;ip=192.236.237.168;r=doctor.nl2k.ab.ca]
1.6 BODY_ENHANCEMENT BODY: Information on growing body parts
0.3 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 MISSING_MID Missing Message-Id: header
3.4 HTML_SHORT_CENTER HTML is very short with CENTER tag
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
0.3 MIME_8BIT_HEADER Message header contains 8-bit character
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
1.1 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 GOOG_STO_IMG_HTML Apparently using google content hosting to
avoid URIBL
0.1 SUBJECT_NEEDS_ENCODING Subject is encoded but does not specify
the encoding
1.3 SCC_BODY_URI_ONLY No description available.
0.7 BODY_URI_ONLY Message body is only a URI in one line of text or
for an image
Subject: {SPAM?} â¤ï¸INCREASED Penis Length & Girthr!ðŸ°
If you no longer wish to receive these emails please
unsubscribe here
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 19 Aug 2022 07:16:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oP1ps-000BvF-2k
for dave@doctor.nl2k.ab.ca;
Fri, 19 Aug 2022 07:14:52 -0600
Resent-From: The Doctor
Resent-Date: Fri, 19 Aug 2022 07:14:52 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [192.236.237.168] (port=50624 helo=ctcmpao.on.ca)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from
id 1oOtyD-000N2g-V0
for sales@nk.ca;
Thu, 18 Aug 2022 22:51:02 -0600
MIME-Version: 1.0
From: Male Enhancement
Subject: â¤ï¸INCREASED Penis Length & Girthr!ðŸ°
Reply-To: resalesply@on.ca
Received: from on.ca (192.236.237.168) by on.ca id 9jgOQMu2N1J6 for
To: sales@nk.ca
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="UTF-8"
Date: Fri, 19 Aug 2022 04:31:26 +0200
X-Spam_score: 12.5
X-Spam_score_int: 125
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: If you no longer wish to receive these emails please unsubscribe
here
Content analysis details: (12.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: googleapis.com]
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=ctcmpao.on.ca;ip=192.236.237.168;r=doctor.nl2k.ab.ca]
1.6 BODY_ENHANCEMENT BODY: Information on growing body parts
0.3 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 MISSING_MID Missing Message-Id: header
3.4 HTML_SHORT_CENTER HTML is very short with CENTER tag
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
0.3 MIME_8BIT_HEADER Message header contains 8-bit character
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
1.1 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 GOOG_STO_IMG_HTML Apparently using google content hosting to
avoid URIBL
0.1 SUBJECT_NEEDS_ENCODING Subject is encoded but does not specify
the encoding
1.3 SCC_BODY_URI_ONLY No description available.
0.7 BODY_URI_ONLY Message body is only a URI in one line of text or
for an image
Subject: {SPAM?} â¤ï¸INCREASED Penis Length & Girthr!ðŸ°
If you no longer wish to receive these emails please
unsubscribe here
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments