Dating phish from China
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@nk.ca
Delivery-date: Thu, 25 Aug 2022 00:45:00 -0600
Received: from [179.51.119.51] (port=64247 helo=hvtelevision.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oR6ao-000DNP-4W
for dave@nk.ca;
Thu, 25 Aug 2022 00:44:00 -0600
Message-ID:
List-Unsubscribe:
Date: Thu, 25 Aug 2022 01:45:13 -0500
From: Mrs. Isabeau Strzelecki
MIME-Version: 1.0
To: Dave
Subject: Do you want me again? I love you madly I want .
Content-Type: multipart/alternative;
boundary="------------14819887588916101496"
X-Spam_score: 35.5
X-Spam_score_int: 355
X-Spam_bar: +++++++++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: It is oblique, in the evening Above physician.Good afternoon
my body explorer.My name is Isabeau. I am from Russia. I saw you on instagramI
am interested in chatting with you, what do you think about [...]
Content analysis details: (35.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: day.my]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: freebeautygirls.cn]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: freebeautygirls.cn]
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[179.51.119.51 listed in bb.barracudacentral.org]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of
words
1.0 J_WEEDS_V FULL: Dec/Hex char Enc [Vv]
1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]
1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]
1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]
1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]
1.0 J_WEEDS_K FULL: Dec/Hex char Enc [Kk]
1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]
1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]
1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]
1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]
1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]
1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]
1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]
1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]
1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]
1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]
1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]
1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]
1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]
1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]
1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 HK_NAME_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_REMOTE_IMAGE Message contains an external image
Subject: {SPAM?} Do you want me again? I love you madly I want .
This is a multi-part message in MIME format.
--------------14819887588916101496
Content-Type: text/plain; charset="Windows-1252"; format=flowed
Content-Transfer-Encoding: quoted-printable
It is oblique, in the evening Above physician.Good afternoon my body =
explorer.My name is Isabeau. I am from Russia. I saw you on instagramI =
am interested in chatting with you, what do you think about it? Are you =
often visit this site if not, we can talk in other social networks. I =
will be waiting to you answer with hurry. Have a wonderful day.My page =
is - http://Isabeau83.freebeautygirls.cnIt's my photo:I hope you will =
find me there and we will become friends
I'm ready for chat!
--------------14819887588916101496
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
"text/html; charset=3DWindows-1252">It is oblique, in the evening =<br /><br />
Above physician.
--------------14819887588916101496--
Envelope-to: dave@nk.ca
Delivery-date: Thu, 25 Aug 2022 00:45:00 -0600
Received: from [179.51.119.51] (port=64247 helo=hvtelevision.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from
id 1oR6ao-000DNP-4W
for dave@nk.ca;
Thu, 25 Aug 2022 00:44:00 -0600
Message-ID:
List-Unsubscribe:
Date: Thu, 25 Aug 2022 01:45:13 -0500
From: Mrs. Isabeau Strzelecki
MIME-Version: 1.0
To: Dave
Subject: Do you want me again? I love you madly I want .
Content-Type: multipart/alternative;
boundary="------------14819887588916101496"
X-Spam_score: 35.5
X-Spam_score_int: 355
X-Spam_bar: +++++++++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: It is oblique, in the evening Above physician.Good afternoon
my body explorer.My name is Isabeau. I am from Russia. I saw you on instagramI
am interested in chatting with you, what do you think about [...]
Content analysis details: (35.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: day.my]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: freebeautygirls.cn]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: freebeautygirls.cn]
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[179.51.119.51 listed in bb.barracudacentral.org]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of
words
1.0 J_WEEDS_V FULL: Dec/Hex char Enc [Vv]
1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]
1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]
1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]
1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]
1.0 J_WEEDS_K FULL: Dec/Hex char Enc [Kk]
1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]
1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]
1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]
1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]
1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]
1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]
1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]
1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]
1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]
1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]
1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]
1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]
1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]
1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]
1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 HK_NAME_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_REMOTE_IMAGE Message contains an external image
Subject: {SPAM?} Do you want me again? I love you madly I want .
This is a multi-part message in MIME format.
--------------14819887588916101496
Content-Type: text/plain; charset="Windows-1252"; format=flowed
Content-Transfer-Encoding: quoted-printable
It is oblique, in the evening Above physician.Good afternoon my body =
explorer.My name is Isabeau. I am from Russia. I saw you on instagramI =
am interested in chatting with you, what do you think about it? Are you =
often visit this site if not, we can talk in other social networks. I =
will be waiting to you answer with hurry. Have a wonderful day.My page =
is - http://Isabeau83.freebeautygirls.cnIt's my photo:I hope you will =
find me there and we will become friends
I'm ready for chat!--------------14819887588916101496
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
"text/html; charset=3DWindows-1252">
Good =
afternoon my body =
explorer.
afternoon my body =
explorer.
My =
name is Is͜abea͠u. I =
am f͇rom Russia. I saw you =
on instagram
name is Is͜abea͠u. I =
am f͇rom Russia. I saw you =
on instagram
I am =
interested in chatting =
with you, what do =
you think about it? =
Ar̨e you o̢ften visit =
this site if not, we =
caͤn talk in other =
socia͇l =
networks. I will =
be waiting to you =
answer with hurry. Have =
a wonderful day.
interested in chatting =
with you, what do =
you think about it? =
Ar̨e you o̢ften visit =
this site if not, we =
caͤn talk in other =
socia͇l =
networks. I will =
be waiting to you =
answer with hurry. Have =
a wonderful day.
My page =
is -
style=3D"text-decoration:underline; color:#0508F5; =
font-size:21pt">http://Isabeau83.freebeautygirls.cn
is -
style=3D"text-decoration:underline; color:#0508F5; =
font-size:21pt">http://Isabeau83.freebeautygirls.cn
It's mֵy =
phot̢o:
"http://Isabeau83.freebeautygirls.cn">
"http://Isabeau83.freebeautygirls.cn/f/115.jpg">
phot̢o:
"http://Isabeau83.freebeautygirls.cn">
"http://Isabeau83.freebeautygirls.cn/f/115.jpg">
I hope =
yoͭu will find me =
there and we will become =
friends :-D I'm =
reaٔdy for chat!
yoͭu will find me =
there and we will become =
friends :-D I'm =
reaٔdy for chat!
--------------14819887588916101496--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments